Re: How to check if Exchange Server is relaying?

From: Mauro (pippo_at_pippo.it)
Date: 05/05/04 

Date: Wed, 5 May 2004 11:24:18 +0200

"Mark Arnold [MVP]" <mark@mvps.org> ha scritto nel messaggio
news:tqah90ddmgp4tr0lk81r98dq1b6pild5lf@4ax.com...
> "Mauro" <pippo@pippo.it> wrote:
>
> >Hi all,
> >
> >I have checked on my Exchange Server SMTP queues and see there are many
> >message to strange sites queued.
> >On the "Relay Restrictions" in "Default SMTP Virtual Server Properties" I
> >have checked "Only the list below" which contains my intranet IP
addresses.
> >
> >Do you think those messages are queued because somebody is trying to
> >relaying but not succeeding, or they are effectively going out?
> >How can I prevent those message to enter the queue?
> >
> >Thanks!
> >
> >Mauro
> >
> It's probably not a relay but more usually spam messages trying to NDR
> to nopn existent domains.

But the questiuon is: do they succeed in sending such messages? I don't want
my domain to enter BlackLists!

> Any reason you're allowing the whole Intranet to relay though? It's
> more usual to select only those systems that actually need to relay
> through your server, rather than an entire subnet.

Our Intranet is quite small (20 PCs). I think I have to let every PC
relaying to let SMTP work, but maybe I'm wrong.
What do you suggest?

>
> Mark Arnold MCSA MCSE+M MVP,
> FAQ: http://www.swinc.com/resource/exchange.htm
> Blog: http://www.msexchange.me.uk

Relevant Pages

  • Mail server security (Was: Re: [fw-wiz] [OT] tcpdump parsing)
    ... I've seen all *sorts* of different ways to relay spam (I'm an admin at a ... This is /not/ a mail system in question, ... users to have a simple, secure way of authenticating themselves, I just ... to find a couple of easy-to-guess passwords) and starts relaying spam ...
    (Firewall-Wizards)
  • RE: cant figure out this sendmail error
    ... >Can't relaying be stopped without using SMTP AUTH? ... SMTP AUTH exists so that you can relay mail through that ... server to someone else, but so that spammers can't abuse your box. ...
    (RedHat)
  • RE: Sendmail issue
    ... the redhat supplied access file should allow relaying from ... > suggested by Jason, but the relaying issue isn't mentioned. ... > ie not localhost. ... the ability to relay from localhost. ...
    (RedHat)
  • RE: Exchange SMTP Hole?
    ... Relaying can be turned off, but there is a checkmark box on the Relay ... Is there a security hole that MS does not know about yet in SMTP????? ... Public PGP Key for Chris Lynch. ...
    (Focus-Microsoft)
  • Re: Still A Open Relay
    ... not IIS) and check the relay setting. ... Select "Only the list below",...Add only your own private LAN subnets to ... If yes, then that is why it allowed relaying, it was because ... >>>picking up from another port to port 25 is causing the relay<< ...
    (microsoft.public.windows.server.sbs)