• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 295
  • Last Modified:

Exchange Server listed as spammer

Hello Everyone,

Yesterday, my public IP address was entered into www.spamhaus.org as being a spammer.  I have followed their advice and did a scan of my exchange server for a virus that might cause mass spamming and came up with nothing.  It might be a possibility that I might be used as an open relay?  Spammers might be using my server to forward their mail?  Anyway, is there any instructions on how to check if my server is being used by spammers?

Thanks for the help!
0
huntersp3
Asked:
huntersp3
2 Solutions
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Have a look at:
http://www.petri.co.il/preventing_exchange_2000_2003_from_relaying.htm

Force all your users to change their passwords - someone might have been compromised.
0
 
flyguybobCommented:
Sembee's site has some great information regarding the post-mortem items for spam.
www.amset.info/exchange
   there are a few spam topics subordinate of that site.

In the meantime, you may have to consider setting up a new external IP address for your e-mail:
You will likely have to change:
the NAT @ the Firewall (hopefully you can use two external IPs to point to the same internal IP)
the PTR Record for the external IP
the MX Record for the new A record
the A record for the new external IP
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now