Re: Spam in Mail Queue



Andel <Andel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

I have an SBS 2003 Server with Exchange. I have queues that are trying to
send spam. Because my server is not open relay they sit and sit in the
queue. How can I stop spam even entering my queue? All the logs suggest
they're spam aimed at non-existant users within the company but its not
returning them... They are not NDRs though - they seem to just be stuck.

So - my questions:
1) How can I prevent it from sitting in the queue?

You cannot. Messages that are addressed to domains that don't accept
email will just sit there until they expire.

2) How can I ensure my server is cloaked?

"Cloaked"? Port 25's gotta be open if you want people to send you
email. Unless you accept email from only a very small number of IP
addresses this is not going to work.

3) What other sources could be trying to send the spam?

Well, just about every unprotected, always-on, home computer is a
source of spam.

Many thanks for any help,

To prevent your server from accepting email that it can't deliver,
enable "Recipient filtering" at the global level (check the box that
says "Filter recipients who are not in the directory". Then enable
recipient filtering on the SMTP Virtual Server.

You should be able to use the IMF, too. It may work well for you (or
not).

Because this is SBS there may be some way they insist you do this
other than by using the Exchange System Manager. The results shold be
the same, but getting there may be different in SBS with its "wizard"
focus.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.



Relevant Pages

  • Re: SMTP Scans
    ... Opinion seems to be divided 99/1 that the scans are bad. ... an open relay, not only that, they are also scanning our mx listed secondary ... >server is pumping it flat out for a day or a week or a month. ... >Or to put it this way: why do you think earthlink, aol and a LOT of spam ...
    (Incidents)
  • Re: External mail being returned
    ... Regards ... > How did they manage to configure the server as an open relay in the ... >> server was being used to relay thousands of spam emails. ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange 2003 SP2 Relay Configuration
    ... I notice emails that are in our outbound queue that I believe are ... spam or emails being relayed thru our system. ... or some other sort of chicanery that prevents your server ... Restrictions i have 4 IP addresses that may relay thru the virtual server, ...
    (microsoft.public.exchange.admin)
  • How do I reject mail aimed at local users such as root and uucp?
    ... My server is being hit really hard with spam. ... now finding filling up my queue is aimed at local users such as:- ... mail aimed at these users so that they never get into my queue. ...
    (comp.mail.sendmail)
  • Re: Exchange 2000 Being used as Relay
    ... It's not anywhere on my server. ... > default, which MS calims, Open relay is closed. ... On thing against spam is gray ... But i dont know how to do taht with exchange. ...
    (microsoft.public.exchange2000.admin)