Re: SPAM Relay

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi SpinalTap:

If you post your email domain name, that is the part after the @, we can
check it for you. Disguise it as in *at*my*company*dot*com (remove the
stars).

There are a number of things that can go wrong. One that just happened to a
client was that he allowed the shop workers to use the wireless side of his
router to use their notebooks at breaks and lunch. One or more of them was
infected and his IP was blacklisted, even though it has nothing to do with
his domain name.

Therefore the public ip address of your wan facing device would also be
helpful.

Here are some articles about checking for relay, but SBS/Exchange is not
setup to relay unless your administrator specifically changed the settings.

http://support.microsoft.com/kb/895853

http://www.microsoft.com/technet/security/prodtech/exchangeserver/excrelay.mspx

http://support.microsoft.com/kb/304897

I would be much more likely to suspect some other issue. shoot us the
domain name and the ip address and we can check, or you can use
www.dnsstuff.com and www.sorbs.net to run some checks yourself.

--
Larry

Please post the resolution to
your issue so that all can benefit.


"SpinalTap" <SpinalTap@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9671A1FD-2D10-41F4-A7D4-0618BB8FE6BC@xxxxxxxxxxxxxxxx
Hello,

I am not exactly sure if my SBS server is acting as a SPAM relay but what
is
happening is that I am receiving a bunch of replies from destination email
addresses. These replies are indicating that messages from one of our
accounts have been blocked, and the subject indicates that it is
definitely
spam. This started happing today, and I have not made any significant
changes to my configuration.

Is there a way to determine if I am acting as a relay? Also, we only use
RWW for accessing email (i.e no POP3), but we do access other POP3
accounts
from other mail services. Given that, what can I turn off to reduce the
chance that this can happen.

Thanks in advance for any insight.

-Dean


.

Relevant Pages

  • Re: MS Exchange Relay Authentication
    ... Make sure you are logging Exchange SMTP interface events. ... Relay restrictions are set to "allow all computers ... > eventlog errors to track down the compromised accounts. ...
    (NT-Bugtraq)
  • Re: SPAM Relay
    ... Please post the resolution to ... I just looked in my SPAM quarantine and there were an additional ... email replies from destinations sent from my domain. ... Here are some articles about checking for relay, ...
    (microsoft.public.windows.server.sbs)
  • Re: SPAM Relay
    ... Here is the header information. ... I just looked in my SPAM quarantine and there were an additional ... email replies from destinations sent from my domain. ... Here are some articles about checking for relay, ...
    (microsoft.public.windows.server.sbs)
  • Re: SPAM Relay
    ... Your message did not reach some or all of the intended recipients. ... I just looked in my SPAM quarantine and there were an additional 400 ... email replies from destinations sent from my domain. ... Here are some articles about checking for relay, ...
    (microsoft.public.windows.server.sbs)
  • Re: Configure sendmail to reject mail for unknown users?
    ... It should always reject email to invalid users. ... on the final destination host before accepting on the relay. ... accounts on it and no I'm not using the virtusers. ...
    (Fedora)