Re: open relay problem?

See inline:

lamlam wrote:

> I have one exchange server 2003. I have clients inside and outside the
> company need to use outlook express to receive POP3 email. I can send emails
> to other domain. But it's still in testing environment.
>
> My SMTP virtual server is configured as follows,
>
> Authentication Tab
> 1. enable - Anonymous access
> 2. enable - Basic authentication

This exposes you to hackers sniffing passwords on the wire. Unlikely scenario,
but still.

>
> 3. enable - Integrated Windows authentication
>
> Relay Tab
> 1. enable - Only the list below option is selected and this list is empty
> 2. enable - Allow All Computers Which Successfully Authenticate To Relay,
> Regardless Of The List Above.

This allows somebody who finds valid credentials to spam the rest of the world
with your help. See if you can get your users to use their ISP mail server.

>
>
> Is that anything I need to config to receive the other domain emails. To
> receive the other domain emails, is that I need to open the SMTP for open
> relay?

You need to configure Recipient Policy to accept mail for additional domains.

> I don't want "open relay" is there any solution to solve it ? My
> settings above already prvoide the open relay function or not?
>
> Thanks in advice.
>
>
>

.

Relevant Pages

  • Re: SMTP Virtual Server Settings --- Lots of Sessions and Junk in
    ... successfully authenticate to relay, regardless of the list above" in case ... And under authentication you can uncheck all but the anoumous authentication ... if you are on a single server if you have more then one exchange server the ... connections trying to send spam) connections coming from companys or "Zombie ...
    (microsoft.public.exchange.admin)
  • Re: Unusual email recieved
    ... > The true idiot is the person with the open mail relay. ... > Try the following on a server ... > of the open relay, not the person that sent it. ... >> Windows 98 Product ID and Product Key. ...
    (microsoft.public.security)
  • Re: Exchange 2000 and Spam mail
    ... Check out Open Relay Filter from www.vamsoft.com - inexpensive, ... > virtual server/access and selecting authentication. ... > That's in the properties of your server. ...
    (microsoft.public.exchange2000.misc)
  • Re: Incoming mail for recipients not in my domain
    ... you can always have them use their own ISP's SMTP server to send ... If you turn off authenticated relay, ... > authentication' and 'Integrated Windows authentication' are enabled. ...
    (microsoft.public.exchange2000.admin)
  • Re: SMTP Questions
    ... > authenticating users trying to send mail, ... SMTP does not work with Encrypted File, only the POP3 server does. ... IP to the list of allowed computers to relay, ... There seems to be a great deal of confusion on> this topic, and I think it stems from Anonymous access> being taken as a type of authentication method, when in> reality it is not. ...
    (microsoft.public.inetserver.iis.smtp_nntp)
Loading