• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

can't stop relaying

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> can't stop relaying Page: [1]
Login
Message << Older Topic   Newer Topic >>
can't stop relaying - 26.Mar.2004 8:01:00 AM   
Guest
I have exchange 2000 sp3 running on the 2k server sp3
Had to stop relaying recently done what ms saying to stop checked many time but as soon as I boot server I have new queue of spam on my SMTP. Can anyone help?
Server doesnÆt seem to be open anymore if I test it with telnet and online.
And I donÆt get 1708 event only 1709 - user cant authenticate.

thx
  Post #: 1
RE: can't stop relaying - 29.Mar.2004 2:00:00 PM   
Henrik Walther

 

Posts: 6928
Joined: 21.Nov.2002
From: Copenhagen, Denmark
Status: offline
It could be a SMTP auth attack, which means one or more AD user accounts are being hijacked by an evil spammer. This means they can relay through your SMTP server, even though it's not an open relay, because they have a valid user account to authenticate with.

To combat a SMTP auth attack, for example see:

http://www.vamsoft.com/orf/authattack.asp

(in reply to Guest)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> can't stop relaying Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter