Exchange 2K relay problems
- From: "FredNurk" <mgeldens@xxxxxxxxxxxxxx>
- Date: Sat, 29 Apr 2006 16:50:26 GMT
Hi all,
A client has MS Exchange 2K server (192.168.0.2) that has a Netgear ADSL
Firewall/Router (192.168.0.1) in front of it.
The router has been configured to send me daily logs. The configured email
address is mikeg@xxxxxxxxxxxxx, outgoing mail server is 192.168.0.2,
authentication is required and a valid username and password provided. Been
working well for a year or two.
Recently one IP address (211.213.103.30) began to send a lot of incoming
SMTP packets. Checking the badmail directory revealed that someone is using
mycompany.com as a brush-off address for spam and that a lot of email is
coming from the 211.213.103.30 address, purporting to be yahoo.com.
Checking System Manager/Servers/Protocols/SMTP/Default SMTP Virtual
Server/Properties/Access revealed that:
1/ Anonymous access, Basic authentication and Integrated Windows
Authentication were all checked. Unchecking Anonymous access prevents
Exchange from receiving normal email from the internet.
2/ Relay restrictions had an empty list box and the check box for "Allow all
computers which successfully authenticate..." was ticked. We seem to have
been providing a spam relay for a few snot-nosed script kiddies.
3/ I have tried to fix this by granting relay permission only to 192.168.0.1
and unchecking the "Allow all..." checkbox. in the Relay Restrictions dialog
box.
It doesn't work.
In the SMTP log I get the following:
2006-04-29 16:34:53 192.168.0.1 unknown SMTPSVC1 SERVER01 192.168.0.2 0
EHLO - +unknown 250 303 12 2313 SMTP - -
2006-04-29 16:35:50 192.168.0.1 unknown SMTPSVC1 SERVER01 192.168.0.2 0
QUIT - unknown 240 45 10 57687 SMTP - -
Does anyone know how to fix this?
Thanks
Mike
.
- Follow-Ups:
- Re: Exchange 2K relay problems
- From: Leif Pedersen [MVP]
- Re: Exchange 2K relay problems
- Prev by Date: Re: Create internal list from one email address open to SMTP from the WWW
- Next by Date: Re: Exchange 2K relay problems
- Previous by thread: Tools to optimize SPs
- Next by thread: Re: Exchange 2K relay problems
- Index(es):
Relevant Pages
|