We help IT Professionals succeed at work.

Exchange 2003 re-enabling incoming email after being used as a mail relay for spamers.

248 Views
Last Modified: 2013-11-30
We  have a 2003 small business server that was used in a mail relay spam attack. I did at least the following to disable mail relaying.
- I deleted the internet smtp conection
- changed the admin password
- disabled the security for anomyous and everyone
- turned off IUSR and IWAM accounts

Now I think I have re-enabled all of those
I created a new SMTP connector and unchecked mail relaying.

I am currently able to send mail but not able to recive mail, and when I go to dnsstuff.com I get the following error: this is the right ip address for our exchange server.

tdmconsulting.com. - 71.16.73.108  [Could not connect: Got an unknown MAIL FROM response: 454 5.7.3 Client does not have permission to submit mail to this server.

What I am thinking is happening is I disabled anonomus connections to the server in one of 100 possible locations, please give me some ideas of where to look, to open the server back up.

Comment
Watch Question

Site Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:
Hmm, just re-read the question and noticed your Mail From response. Is this through a manual test in telnet or a response from say Yahoo or some other email provider who you've tried to send a mail to tdmconsulting.com through?

-tigermatt

Author

Commented:
Just did a test at http://mxtoolbox.com 
I am not reciving any incomming email at all from the outside world.
nick@tdmconsulting.com is my address, it doesn't error out from gmail but it never shows up in my email box. and checkign the server incoming logs I don't see it either

MAIL FROM: <test@mxtoolbox.com>
454 5.7.3 Client does not have permission to submit mail to this server. [62 ms]

Author

Commented:
I re- added the mx record.

Author

Commented:
DNSReport.

Mail FAIL Connect to mail servers ERROR: I could not complete a connection to any of your mailservers!

tdmconsulting.com: Timed out [Last data sent: MAIL FROM: ]

If this is a timeout problem, note that the DNSreport only waits about 40 seconds for responses, so your mail *may* work fine in this case but you will need to use testing tools specifically designed for such situations to be certain.

Author

Commented:
How to Configure a Virtual SMTP server
Opposite is a diagram to help you navigate to the various Virtual Servers folders.  Once you have found your Exchange 2003 server object, expand the Protocols folder.  Each protocol has its own Virtual server.  SMTP for MAPI clients (Outlook), HTTP is for OWA (Outlook Web Access).

We are most interested in the Default SMTP Virtual Server.  As its name suggests, this is the container where you check settings for regular SMTP mail.  (See this SMTP server object at the very bottom of the screen shot.)
http://www.computerperformance.co.uk/exchange2003/exchange2003_virtual_servers.htm

found it... couldn't figure out where I unchecked anonomus access
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:
Ah well, all seems well now! MX records seem fine.

You may want to ask CS to edit your post above and remove the email address so the spiders don't index it and it doesn't get harvested by spammers!

:-)

-tigermatt

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.