Re: Inside user spamming

From: Leif Pedersen [MVP] (leif.pedersenNOSPAM_at_get2net.dk)
Date: 12/05/04 

Date: Sun, 5 Dec 2004 18:37:50 +0100

Hi,

This article explains how to find the culprit:
http://www.vamsoft.com/orf/authattack.asp

Leif

"exchangerookie1994" <exchangerookie1994@discussions.microsoft.com> skrev i
en meddelelse news:2A7EC9F3-1591-43E8-BD14-17ADBAE33E62@microsoft.com...
> I have a set up Exch2000 fresh load. I have locked relay capabilties to
local
> ip subnet. I have tested for open relay from outside - good. I have
unchecked
> allow authenticated users to relay setting. My smtp queue is filling fast.
Is
> there a utilty /software to see were this mail is coming from. I think it
has
> to be someone on inside (domain user). I have also turned on logging on
> MStransport - smtp protocol to maximim
> logging.
> Please help

Relevant Pages

  • Inside user spamming
    ... I have tested for open relay from outside - good. ... allow authenticated users to relay setting. ... My smtp queue is filling fast. ... I have also turned on logging on ...
    (microsoft.public.exchange2000.transport)
  • [UDP] Overide "source" addr/port ?
    ... I have 3 incoming logging feeds that send to UDP port 7150 on my system, ... I can make the logging app listen on my LAN ip and have my ... relay listen on my WAN ip, so it recieves the feed, ...
    (comp.lang.perl.misc)
  • Re: Help, Ive been hijacked! :-(
    ... > got it setup with about ten or twenty user accounts in three different ... > The SMTP server is configured to allow relay for authenticated users only. ... > I installed a server level virus package this weekend and noticed today ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: Followed the KBs but still an Open Relay?
    ... I clear the checkmark for authenticated users. ... Make sure the guest account is disabled. ... which supposedly do not allow open relaying. ... >allow authenticated users to relay regardless of their IP. ...
    (microsoft.public.windows.server.sbs)
  • RE: smtp open relay
    ... Exchange 2000 is locked down by default to only allow authenticated users ... If you have changed the settings on the Relay button of the ... Microsoft Exchange Support ... Please do not send email directly to this alias. ...
    (microsoft.public.exchange2000.connectivity)
Loading