Re: Mail being blocked by spamcop.net
- From: "ahl" <gotsickofspam@xxxxxxxxxxxxxxxxxxx>
- Date: Sun, 21 May 2006 12:21:13 +1000
Hey Mark,
How were they able to relay?
Had they guessed a password?
"Mark" <fastzrex@xxxxxxxxxxxxxxxx> wrote in message
news:38195FF6-A1F2-4915-A7A3-F989A6CB8358@xxxxxxxxxxxxxxxx
Dave, after following the KB you suggested, I found and repaired the
settings. The logs are showing repeated attempts to relay e-mail through
SBS
but are now being denied. And, the domain and IP have been removed from
SpamCop, so we are back to normal. While I was at it, I installed the SPF
text at the DNS hosting company (which I have been slow to complete, until
now!).
Thanks again for your help!
--
Best Regards,
Mark
"Dave Nickason [SBS MVP]" wrote:
Your SBS should not be relaying by default. See:
How to block open SMTP relaying and clean up Exchange Server SMTP queues
in
Windows Small Business Server
http://support.microsoft.com/default.aspx?scid=kb;en-us;324958
Another good idea would be to configure SPF. See
http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/
for a wizard that'll help you set that up.
"Mark" <fastzrex@xxxxxxxxxxxxxxxx> wrote in message
news:2371AF5A-3118-49DD-A406-6DBDB593700F@xxxxxxxxxxxxxxxx
Hello! I have a SBS2003 Premium with two Nics, ISA 2004, and am using
DNS
to
forward e-mails. I have a static IP on a T1 line.
During the last four days, I have some mail that is being bounced with
the
message that it was being blocked by bl.spamcop.net as being a spam
site.
I
have spoken with my ISP and in looking in their logs it shows that an
IP
address is being relayed through my server.
1) Is there some tests I can run to confirm or deny Exchange being used
as
a
relay?
2) Any logs I should review on my server which would help determine
where
the problem may lie?
3) Should I ask my ISP to to see if I can send my e-mail through their
servers and run the wizard again for this configuration.
Here is one of the log entries provided by my ISP (Logix). My server IP
is
216.201.192.166 (sbs1.thescinc.com), and it shows a message coming from
"Received: from [216.201.221.102] (helo=pqx) by sbs1.thescinc.com with
smtp
(Exim 4.43)". See below:
Received: from kelvin.pobox.com (kelvin.pobox.com [207.8.226.2]) by
wand.pobox.com (Postfix) with ESMTP id 263C199 for
<57019042@xxxxxxxxxxxxxxxxxxx>; Tue, 9 May 2006 13:51:12 -0400 (EDT)
Received: from kelvin.pobox.com (localhost [127.0.0.1]) by
kelvin.pobox.com
(Postfix) with ESMTP id 5508C129B1D; Tue, 9 May 2006 13:50:30 -0400
(EDT)
Received: from sbs1.thescinc.com (sbs1.thescinc.com [216.201.192.166])
by
kelvin.pobox.com (Postfix) with SMTP id 8586D129ADC for
<richardk@xxxxxxxxx>;
Tue, 9 May 2006 13:50:17 -0400 (EDT)
Received: from [216.201.221.102] (helo=pqx) by sbs1.thescinc.com with
smtp
(Exim 4.43) id 1FdWLv-0006IN-TE; Tue, 9 May 2006 12:50:31 -0500
Delivered-To: richardk@xxxxxxxxx
Message-ID: <002001c67390$ed213900$66ddc9d8@pqx>
From: "Jack Sosa" <sbfc@xxxxxxxxxx>
To: <richardk@xxxxxxxxx>
Subject: radium
Date: Tue, 9 May 2006 12:45:12 -0500
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_001C_01C67367.044B3080"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-ICG-Account-ID: 57019042
Lines: 463
--
Any help would be appreciated!
Best Regards,
Mark
.
- Follow-Ups:
- Re: Mail being blocked by spamcop.net
- From: Mark
- Re: Mail being blocked by spamcop.net
- References:
- Re: Mail being blocked by spamcop.net
- From: Dave Nickason [SBS MVP]
- Re: Mail being blocked by spamcop.net
- From: Mark
- Re: Mail being blocked by spamcop.net
- Prev by Date: Re: ISA 2004?? - Premium 2003 and Branch Office Getting to Internal Network
- Next by Date: Re: RAM Limitation in SBS 2003
- Previous by thread: Re: Mail being blocked by spamcop.net
- Next by thread: Re: Mail being blocked by spamcop.net
- Index(es):
Relevant Pages
|
