Keep listing exchange IP in CBL (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message


faraz@chillizone.com -> Keep listing exchange IP in CBL (10.Jun.2008 1:54:10 AM)

Hi everyone,
 
We are running exchange server 2003 with latest service packs and patches on SBS 2003; almost couple of months ago we got many on our mails undeliverable on finding our IP was listed as black in many antispam authories; I have checked my exchange is not 'open relay', we are using latest sunbelt messaing Ninja for antispam, we are using NOD32 for antivirus with current definations on all clients/server, we are using CounterSpy with current defination on all clients/server....I have run a manual scan just to make sure for all of the above application of my clients PC and on Server but didn't find any spywayres/virus or other things... Now I am really afraid that why we are keep listing back as black listed IP in some authorities specially CBL, does anyone face this problem before or what should I do to get rid of this situation?
Please help!




Sembee -> RE: Keep listing exchange IP in CBL (11.Jun.2008 10:42:48 AM)

If you keep getting blacklisted then you probably have a compromised workstation.
Some firewall rules will soon show the culprit:
http://www.sembee.co.uk/archive/2008/03/13/73.aspx

If your Exchange server is being abused you can usually tell because there will be lots of messages in the queues - spammers lists of email addresses are not always that clean!

Simon.




Page: [1]