Event 4007 Warnings

anonymous_at_discussions.microsoft.com
Date: 08/19/04


Date: Wed, 18 Aug 2004 19:29:13 -0700

I keep getting event 4007 warnings from the smtpsvc. I get
about 20 or so a day. Here is an example of one of the
errors:

"Message delivery to the host '209.142.136.72' failed
while delivering to the remote domain 'freechal.com' for
the following reaons: An SMTP protocol error occurred.
The SMTP verb which caused the error is 'MAIL'. The
response from the remote server is '553 5.3.0 [my mail
server's IP]ERROR:550 You appear to have an open proxy or
trojan horse sending spam."

Instead of the response from the remote mail server being
error 550, most of them just say "Domain of sender address
<some random email address> does not exist."

I think this means that people are using my server as a
relay to send spam mail. Is there any way to stop this or
to at least stop these warnings from popping up all the
time without requiring authentication before accepting the
mail? I'd really would hate to have to explain to all my
users how to turn on the setting for that in their email
clients. Is that the best course of action though? Thanks.



Relevant Pages

  • SecurityFocus Microsoft Newsletter #152
    ... MICROSOFT VULNERABILITY SUMMARY ... Real Networks Helix Universal Server Remote Buffer Overflow ... ... NEW PRODUCTS FOR MICROSOFT PLATFORMS ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #140
    ... Cafelog b2 Remote File Include Vulnerability ... Webfroot Shoutbox Remote Command Execution Vulnerability ... Pablo Software Solutions Baby POP3 Server Multiple Connection... ... Microsoft Windows XP Nested Directory Denial of Service... ...
    (Focus-Microsoft)
  • RE: Remote Office Configuration Suggestions?
    ... The additional DC at the remote site, could not be the SBS server, as you ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 sudden services problem over router based vpn
    ... I understand that your remote cannot receive POP3 emails through VPN ... SBS Server through routers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Download connection Manager through RWW
    ... the issue may occur due to the Remote VD is ... Then please rerun the CEICW wizard and Configure Remote access wizard ... Start Internet Explorer. ... Since the Symantec anti-virus application installed on the server, ...
    (microsoft.public.windows.server.sbs)