Exchange Server Forums

Stop UnAuthenticated Users from Submitting email

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Secure Messaging >> Stop UnAuthenticated Users from Submitting email

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Stop UnAuthenticated Users from Submitting email - 14.Aug.2008 2:56:55 PM

mark@greatlittlebox

Posts: 8
Joined: 10.Mar.2008
Status: offline

Hi everyone,

I can't seem to figure out what I need to change so that unauthenticated users can't submit email to my exchange server from within our network. i.e. if i create a dummy account in outlook express and assign the outgoing server to my exchange server ip, it accepts and delivers the message. If I turn off anonymous in the receive connector then it blocks all email from everyone who isn't a registered exchange mailbox. I've done an external relay check and that is set up properly and does not allow people to relay.

The reason i want to do this is because i believe there is a virus somewhere on my network sending out email to the exchange server and getting our IP address blacklisted. Very frusterating. Maybe someone knows of a good plugin that will stop this type of thing happening.

Thanks,
-Mark

Post #: 1

Featured Links*

RE: Stop UnAuthenticated Users from Submitting email - 14.Aug.2008 3:13:52 PM

tmacdaddy

Posts: 38
Joined: 3.May2007
Status: offline

Do you know what black list you are on? spamhaus ? Ask them to provide one of the emails and turn on messgae tracking on the Exchange server and see whats happening. Is it Exch 2007? Message tracking is in the EMC under tools. Nice tool! Check your queues and see what is trying to go out... Maybe not great idea's, but hey you have to start somewhere

(in reply to mark@greatlittlebox)

Post #: 2

RE: Stop UnAuthenticated Users from Submitting email - 14.Aug.2008 3:27:30 PM

mark@greatlittlebox

Posts: 8
Joined: 10.Mar.2008
Status: offline

it is exchange 2007 and i have watched the message tracking logs. You're right, i should contact the CBL to see if i can get one of the emails they caught.

i still feel that it is pretty insecure to have the exchange server able to accept outgoing mail from anything within my network.

(in reply to tmacdaddy)

Post #: 3

RE: Stop UnAuthenticated Users from Submitting email - 5.Sep.2008 6:04:59 PM

AirJunkie

Posts: 5
Joined: 13.Aug.2008
Status: offline

Lurking 2007 forums and noticed this. 2003 you can go into the SMTP Virtual Server properties on each server and specify the which IP's can connect, as well as which can relay. My organization currently restricts which systems can relay messages, which will help you stay off a black list assuming the virus hasn't affected one of the systems you allow to relay.

2007 doesn't have something similiar?

(in reply to mark@greatlittlebox)

Post #: 4