RE: Relay Nightmare

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 25 Sep 2004 23:54:28 -0500

Hi Craig,
 
Do a NetMon trace and identify the source IP address of the relayed
spam. It could be that your users are infected with a spam generator and
the spammer is leveraging their authenticated connections.
 
HTH,
Tom
www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
MVP -- ISA Firewalls

        -----Original Message-----
        From: Craig_Weil [mailto:craig_weil@xxxxxxxxxxx] 
        Sent: Friday, September 24, 2004 2:02 PM
        To: [ExchangeList]
        Subject: [exchangelist] Relay Nightmare
        
        
        http://www.MSExchange.org/
        
        Running Exchange 2000, default settings for the smtp virtual
server... (Anonymous Access - so we can receive outside email, Basic
Authentication, Integrated Windows Authentication all checked, Relay
restrictions set to "Only the list below" which is empty and "Allow all
computers which successfully authenticate to relay..." checked so that
employees can send mail while connected to another ISP, Outbound
Security options set as default - Anonymous Access checked)
        My server is STILL relaying mail.  I can look in any number of
queues and it's like a clearing house for spam.
         
        Any ideas?
         
        Much appreciation!
         
        Craig
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
        Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
        Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        World of Windows Networking: http://www.windowsnetworking.com
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 ISA Server Resource Site: http://www.isaserver.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this MSEXchange.org Discussion
List as: tshinder@xxxxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
        Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: