Re: Exchange2003 & Open Relay Q?

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 07/01/04 

Date: Thu, 1 Jul 2004 11:10:03 -0400

Dickie wrote:
> I have recently been receiving loads of SPAM mail, I have checked the
> SMTP default protocol and the Relay option. The box is checked for
> "Only The List Below" and in this list are 3 IP addresses which I
> know about. At the bottom of the screen is a check box saying "Allow
> All Computers which successfully authenticate, regardless of list
> above", this box is currently ticked. Should this box be ticked and
> what effect does it have.

If you have external POP users who are using your server as their SMTP
server, you may need it ticked. However, if you have external POP users,
they can always use their own ISP's SMTP server anyway, so I usually uncheck
it. If you don't have a very good strong complex password policy enabled,
etc., or have enabled Guest, spammers may be exploiting you as a relay. See
http://www.vamsoft.com/orf/authattack.asp for more info.

However - this has nothing to do with your *receiving* spam. That's just
mail being sent to your domain. Might be time to look into a third party
content filtering solution - www.gfi.com seems to be a good choice for many.
There's also the third party service route, such as www.postini.com if you
don't want to manage this in-house.
>
> Thanx in advance for any help.

Loading