Re: Help! Being Used As A Relay

From: Deji Akomolafe (deji_at_REMOVEPADDINGakomolafedotcom)
Date: 09/04/04 

Date: Sat, 4 Sep 2004 10:15:47 -0700

You are confusing SPAM attack with open relay. Someone is blasting SPAM into
your server, your server accepts the mails but can't deliver it, then your
server tries to return them (NDR) but can't either because the source
addresses are spoofed.

This is where you need an Anti-SPAM filter like mine. 

-- 
Sincerely,
Dèjì Akómöláfé, MCSE MCSA MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - COMPLETE SPAM Protection
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon
<anonymous@discussions.microsoft.com> wrote in message
news:601601c4929f$c8d8e710$a601280a@phx.gbl...
>
> >-----Original Message-----
> >
> >"Gerry" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:600b01c4929a$8260b010$a501280a@phx.gbl...
> >>I am running Exchange 5.5 and I've noticed that I have a
> >> ton of mail messages in my IMS Queue waiting to be
> >> delivered.  They are all unknown senders and recipients.
> >> I've followed Microsoft's instructions to prohibit
> >> relaying, but I still get messages coming through.
> When I
> >> telnet my server and type in RCPT TO: xx@xx.xx  I
> get "550
> >> Relaying Prohibited".  When I check the "Diagnostic
> >> Logging" file created by the "SMTP Protocol Log", I can
> >> see the RCPT TO: xx@xx.xx and it is followed with "350
> Go
> >> Ahead".  I would have thought to see "Relaying
> >> Prohibited".  Any help would greatly be appreciated.
> >
> >Why don't you delete them from the queue?
> >
> >
> >.
> >I have deleted them from the queue.  Once I re-enable the
> IMS Service, the messages start piling up again.
>
> Thanks,
> Gerry

Relevant Pages

  • Still Cant send mails on Hotmail
    ... As per our discussion in my last thread appended below, i cant find any spam ... database where my IPs are listed.I searched msn spam database, ... I have 2 mails server one running Microsoft exchange ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Outbound queues fill up
    ... But usually SPAM ... and rejects mails addressed to non existent mailboxes. ... > the queues, disconected our server from the network. ...
    (microsoft.public.exchange2000.general)
  • Re: How to do rDNS. WAS: RE: educating rDNS violators
    ... It's done in the DNS server. ... As a spam prevention measure, a lot of end-user Internet providers are ... Using your own mail server as a slave to the ISP's mail server will add ...
    (Security-Basics)
  • Re: Spam? was: Linux 2.4.23-pre1
    ... The original message has been attached ... > This was marked as spam from spamassassin. ... This is because the osirusoft.com RBL server has been under attack ... did not mark those mails as spam but completely blocked all mails ...
    (Linux-Kernel)
  • RE: OMA and Outgoing Spam
    ... Someone hacked a user account and use it to spam emails; ... Your Exchange server is open relaying emails;(You have checked it ... Your server is under RNDR Attack. ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)