Exchange 2003 open-relay

spacoit
spacoit used Ask the Experts™
on
I am running server 2003 sp2 with exchange 2003.  I have a webmaster account that seems to be sending out spam.  The password has been changed, but it seems more like a open-relay type situation.  The message queues have multiple messages that are trying to go out that are spam.  

How do I stop this from happening?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Co-Owner
Top Expert 2011
Commented:
Please have a read of my article and see if either scenario matches yours:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2556-Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html

You can check if you are an Open Relay on www.checkor.com - if you are not, then you are probably an authenticated relay / receiving NDR spam which my article tackles.

Alan

Author

Commented:
According to checkor.com there is no relay.  I did enable the sender and recipient filtering.  I *think* the flow has slowed.  I will wait till morning to see if this has taken care of the issue.

Thanks and great article.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
You are welcome - hopefully if it is just a case of NDR spam and all you had was Administrator mail going back to spammers, you should be fine, but please check www.mxtoolbox.com/blacklists.aspx and make sure you haven't landed on Backscatterer.org.

Author

Commented:
Thanks for your help

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial