Re: smtp relay abuse

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 06/15/04 

Date: Tue, 15 Jun 2004 15:18:10 +0200

It is very possible that someone has guessed (or stole) a user account and
password and is not authenticating and relaying emails over your SMTP.

You can always run a test and prevent relaying for authenticated users. If
the relaying stops you have your answer.

Check that every account on your PC has assigned strong password (no default
or easy to guess passwords)... If the problem is authenticated relay then my
advice to you would also be to change password for all the users on your
system...

I hope this helps,

Mike

"Rob" <anonymous@discussions.microsoft.com> wrote in message
news:1ca7c01c452d3$2d138e90$a401280a@phx.gbl...
> Running Win 2003 Server as a standalone with POP3
> mailboxes, I am getting spammers relaying thru the smtp
> virtual server, even though I have restricted Relay
> Access by selecting the radio button "Only the List
> Below", with no computers listed, and have checked the
> box "Allow all computers that successfully authenticate
> to relay". Authentication Access has "Anonymous Access"
> and "Integrated Windows Authentication" checked. (I tried
> unchecking Anonymous Access but that does not stop the
> unauthorized relay.) It almost seems to me that the
> spammers are somehow authenticating on this server. Any
> ideas as to how the spammers are accomplishing the relay
> and what can be done to stop it. So far, my only remedy
> has been to stop the smtp virtual server, which of course
> renders my email system inoperable.
>