Solved

Open Mail Relay

Posted on 2004-04-01
8
636 Views
Last Modified: 2008-02-20
I have been trawling through all the past entries on this topic to no avail, basically I am running a single Exchange 2000 server SP2 which has it's SMTP virtual server to only allow relaying to the "list below" in the list I only have the three subnets that this server serves. I have been through the IIS settings on this server to ensure that this is the case for all entries in there also. I also have a server sitting in front of the exchange server scanning SMTP running Network Associates Webshield, this also has it's "Anti spam Relay" configured to only traffic from the three subnets, it also has IIS and SMTP disabled. However despite all this we are an open mail relay, I have even just stopped the virtual server and tried the external Relay tester again and it still came back as an open relay which tends to make me think that Exchange is configured correctly and this is something else. Does anybody have any ideas? I am getting desperate.
Cheers
0
Comment
Question by:mayiain
  • 4
  • 2
8 Comments
 
LVL 3

Expert Comment

by:hcoltrain
ID: 10731989
Mayiain,

 What relay tester are you using? And what test are you failing?


 Harris C
0
 

Author Comment

by:mayiain
ID: 10732026
http://members.iinet.net.au/~remmie/relay/
http://www.mob.net/~ted/tools/relaytester.php3

These are the two I have been using today but I generally get the same response wherever I test it from.eg

Connecting to xxx.xxx.xxx.xxx ...
<<< 220 xxxxxxx.xxxxxxx WebShield SMTP V4.5 MR1a Network Associates, Inc. Ready at Thu Apr 01 14:54:16 2004
>>> HELO godfather.mob.net
<<< 250 xxxxxx.xxxxxxxx Welcome godfather.mob.net
>>> MAIL FROM:
<<< 250  ... OK
>>> RCPT TO:
<<< 554 SPAM-Relay detected
0
 
LVL 3

Expert Comment

by:hcoltrain
ID: 10732277
Mayian,

 I beleive by default, that Exchange accepts mail from <> -null sender, as to be RFC complaint.  However, since spammers can use this against you a relay test will consider servers that allow this, as Open Relays. Looks like the test gets to sending mail off your server, where the <MAIL FROM:>field is blank and labels it as an open relay.

 In any case, you can solve this by having your users use SMTP Authentication. Try turning it on, and then running the tests and see what you receive. I am not sure, how to disable this in Exchange, but I am sure it can be done.

 Harris C
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:mayiain
ID: 10739547
Does anybody else no how to disable this in exchange?
0
 

Author Comment

by:mayiain
ID: 11028702
I have not abondoned it but as there have been no further suggestions offered or clarifications given there is not much I can do....
0
 
LVL 20

Accepted Solution

by:
What90 earned 500 total points
ID: 11028724
Hi mayiain,

Is this what you wanted?

http://www.msexchange.org/tutorials/MF005.html
0
 

Author Comment

by:mayiain
ID: 11029007
Certainly is, many thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now