SMTP "Flood"

My incoming internet connection has been filling up with SMTP traffic like crazy basically stopping all other internet-based activitiy.   We have done all the Exchange 2003 stuff for stopping mail relay, and nothing has worked.  Any ideas?
jhunter9999Asked:
Who is Participating?
 
scampgbCommented:
Hi jhunter9999,
Are these emails that you're receiving legitimate?

In other words, are they correctly addressed to your users - or is it an attempt to relay?

You can go to http://www.abuse.net/relay.html to check if your machine is acting as an opten relay.

If the emails are legitimately addressed to your users, and you want to receive them, then you have two options:
1 - Increase the bandwidth of your Internet connection
2 - Configure a router/firewall with prioritisation to ensure that SMTP (port 25) traffic is handled as a low prority.

Does that help?
0
 
savoneCommented:
If it is indeed relaying you have a couple options although I am not a secuity expert.

1) Change the port number for SMTP (will slow down the attacks)

2) Require authentication for SMTP

0
 
jhunter9999Author Commented:
Turned out not to be relay, but some outbound queue corruption found by Microsoft suppot.  The router vendor did go in and setup some SMTP low-priority stuff, as a future precaution however   So, while not the exact solution, it was helpful to find out that the router had that capability, and it may prevent future problems

Thanks to both of you however for responding.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.