Re: Relaying or Not

From: Robby Pollard (robby_pollard_at_hotmail.com)
Date: 04/24/04 

Date: Sat, 24 Apr 2004 00:04:54 -0500

Mark,

Thanks for the quick response. I hope this helps.

Regards,

Robby

"Mark Fugatt [MVP]" <news@4mcts.com> wrote in message
news:evP%238abKEHA.2580@TK2MSFTNGP12.phx.gbl...
> Could be that you are the victim of an Auth Attack:
> http://www.vamsoft.com/orf/authattack.asp
>
http://www.winnetmag.com/Articles/Index.cfm?ArticleID=42406&feed=rss&subj=MicrosoftExchangeOutlook
> http://www.winnetmag.com/article/articleid/40507/40507.html
>
> --
> Mark Fugatt
> Exchange MVP
> http://www.exchangetrainer.com
> http://www.msexchange.org
> "Robby Pollard" <robby_pollard@hotmail.com> wrote in message
> news:enwiNXbKEHA.3580@TK2MSFTNGP10.phx.gbl...
> > W2K3/E2K3 configured in a FE/BE setup.
> >
> > I have a problem here. It appears that I am setup to relay but I'm not.
> > I
> > have followed KB324958 to verify that I do not have an open relay
server.
> > I
> > have gone to various open relay test sites to confirm it as well as
> > telneted
> > to the mail server and tested. All report that I am not setup for open
> > relay.
> >
> > The odd thing is I am spamming the world. If I look at my queues I have
> > approximately 3000+ and I have been added to several RBL/black list.
> >
> > I looked at my default SMTP Virtual Server and I see names like
testicles,
> > loser, gotcha, etc.... How are they connecting to my server and
relaying
> > off of it when it is not open for relaying?
> >
> > Any help to shut this down immediately would be greatly appreciated.
> >
> > PS I also followed KB324958 to clean up the 3000+ queues. The only
> > problem
> > is as soon as I enable the default SMTP virtual Server within the hour
the
> > queues start incrementing by the 100's again.
> >
> > Regards,
> >
> > Robby
> >
> >
>
>

Relevant Pages
Quantcast