Exchange Server Forums

Keep listing exchange IP in CBL

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> Keep listing exchange IP in CBL

Page: [1]

Message

<< Older Topic Newer Topic >>

Keep listing exchange IP in CBL - 10.Jun.2008 1:54:10 AM

faraz@chillizone.com

Posts: 4
Joined: 10.Jun.2008
Status: offline

Hi everyone,

We are running exchange server 2003 with latest service packs and patches on SBS 2003; almost couple of months ago we got many on our mails undeliverable on finding our IP was listed as black in many antispam authories; I have checked my exchange is not 'open relay', we are using latest sunbelt messaing Ninja for antispam, we are using NOD32 for antivirus with current definations on all clients/server, we are using CounterSpy with current defination on all clients/server....I have run a manual scan just to make sure for all of the above application of my clients PC and on Server but didn't find any spywayres/virus or other things... Now I am really afraid that why we are keep listing back as black listed IP in some authorities specially CBL, does anyone face this problem before or what should I do to get rid of this situation?
Please help!

_____________________________

Regards,
Faraz H. Khan
Chillizone Ltd. - http://www.chillizone.com

Post #: 1

Featured Links*

RE: Keep listing exchange IP in CBL - 11.Jun.2008 10:42:48 AM

Sembee

Posts: 3191
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline

If you keep getting blacklisted then you probably have a compromised workstation.
Some firewall rules will soon show the culprit:
http://www.sembee.co.uk/archive/2008/03/13/73.aspx

If your Exchange server is being abused you can usually tell because there will be lots of messages in the queues - spammers lists of email addresses are not always that clean!

Simon.

_____________________________

Simon Butler,
Exchange MVP
Blog: http://www.sembee.co.uk/
Web: http://www.amset.info/
In the UK? Hire me: http://www.amset.co.uk/

(in reply to faraz@chillizone.com)

Post #: 2