Solved

Exchange server is unable to relay but still sends spam

Posted on 2004-08-23
5
209 Views
Last Modified: 2013-12-04
Hi,

My problem is that i have an exchange server 2000 :-) . I've did a basic installation and disabled the relay option.
Tested this with telnet and yes my server was unable to relay. After couple of weeks i saw 200 domains in my smtp queue with let's say 2000 mails waiting to be sent. I looked in the current sessions display and saw an connection from somebody for over 3000 seconds. When I terminated this person and deleted my messages in the queue i saw a whole list appearing yet again and when i looked in the current sessions display I saw again a person from another IP adress. you can deny all those ip adresses but they are still appearing with new ip adresses and new names.

How can I stop this. Installed all windows updates and service packs for exchange...

What to do?

With regards,

Steven Oosterhuis
0
Comment
Question by:deficom
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 

Author Comment

by:deficom
ID: 11868945
help
0
 
LVL 8

Expert Comment

by:anil_u
ID: 11872270
This really is the million dolar question.
I was able to significatnly reduce spam by enabling relaying for those email that originated from the server.
This setting is in the same place as where you disable the relay.
Try it.
0
 

Author Comment

by:deficom
ID: 11988745
Came up with it myself.
When you set your relay settings as they are told by Microsoft you have to select the option Allow all computers which successfully authenticate to relay, regardless of the list above  . And in exchange 2003 there was a anonymous user account which some people used to connect to my mail server and relay spam.....

:-) customer happy and I can sleep again... (Yawn)
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 14005379
PAQed with points refunded (251)

modulo
Community Support Moderator
0

Featured Post

2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question