asked on

SBS 2003, Exchange 2003, smtp rejects incoming mail, 454 5.7.3 Client was not authenticated.

Settings of SMTP server:
IP - all unassigned
Access Control - Basic Authentication, Windows Integrated Authentication
Users - Anonymous logon, everyone - submit, authenticated users - submit, relay
Connection control - all except the list below and field is empty
Relay - Only the list below and empty field + checked Allow all computers which ......................
Outbound security - Anonymous Access

In Outlook I have to check authenticate to send email, and it is going ok.

If I in Access Control check Anonymous access, it is possible to send spam over this smtp server. I'm testing it using telnet.

Pls help me, if you know answer.

Thanks a lot

gpriceee

Access Control --> select Anonymous access (this allows emial to be delivered to you)
--> clear Basic

--> Users Check Submit
--> Users Clear Relay

Connection control is okay
Relay is okay
Outbound is okay

jsysel

ASKER

If I check Anonymous access, I'm unable to set to users or group of users, this button is unavailable. I try spam test and it allow all emails I tried to sent.

gpriceee

Restart the virtual server

jsysel

ASKER

Nothing helped. Spam is still going thru. I need to get rid of spam and incoming messages should be accepted.

gpriceee

SPAM is different from relaying. SPAM requires filtering. You can try the Microsoft Intelligent Message Filter:
http://www.microsoft.com/downloads/details.aspx?familyid=C1B08F7B-8CAF-4147-B074-8C9C8F277071&displaylang=en

jsysel

ASKER

I know this anti-spam filter. But if I change Anonymous access, then everybody can send emails using their email addresses to another addresses, that doesn't belongs to my domain. So I need to be able, to receive messages from everyone and to disable messages from anyone to someone else.

gpriceee

Hi.
Have you stopped and restarted the virtual server? SMTP?
After you make changed to the virtual server, you should restart it. After you make changes to an SMTP connector, you should restart the SMTP service.

Are you attempting to receive messages from everyone but deliver messages to no one external?

jsysel

ASKER

I restarted SMTP virtual server and SMTP service too.

I can send messages to anyone, I can receive messages only from users, that are in my domain(they have to login to send emails).

gpriceee

Hi. If you don't allow anonymous authentication, you won't be able to receive email from external users. Their servers do not know the authentication for your server; thus, anonymous.

Do you actually have SPAM being sent from your server?

Ultimately, how do you want to protect your email? A prefered method is top have an SMTP box residing in the DMZ and have that box forward to the Exchange server.

jsysel

ASKER

Now it is not possible to do it this way. Because our financial situation is not good. So we have email server and before it firewall. If I allow anonymous access, than can anybody send message in the following format:
My domain: xxx.com

his domain: yyy.com
sending email to domain: zzz.com

he's able to send emails from anywhere using any email address to be source and any email address to be destination. I can't allow this. If you want to know more settings, pls just ask.

ASKER CERTIFIED SOLUTION

gpriceee

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

gpriceee

Here is a very good link to check your server for relay issues:
http://support.microsoft.com/?kbid=895853&SD=tech

How is it going?