• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Doubt about the Exchange relay.

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Doubt about the Exchange relay. Page: [1]
Login
Message << Older Topic   Newer Topic >>
Doubt about the Exchange relay. - 15.Nov.2004 11:47:00 AM   
Winfax

 

Posts: 35
Joined: 9.Jul.2004
From: Fairfax
Status: offline
Hi everybody,

I configured Enable logging from default smtp virtual server properties to see the smtp log.

According to my knowledge I think that others are sending mails through my smtp port.

Please clarify me whether i am correct or not. I attached some logs of smtp port logging.

#Software: Microsoft Internet Information Services 5
#Version: 1
#Date: 11/16/2004 3:08:01
#Fields: date time c-ip cs-username s-sitename s-ip s-port cs-method cs-uri-stem
11/16/2004 3:08:01 61.82.160.216 kimdh SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:11 61.82.160.216 kimdh SMTPSVC1 MAIL 0 MAIL - +From:+v11121207@thrunet.net
11/16/2004 3:08:11 61.82.160.216 kimdh SMTPSVC1 MAIL 0 RCPT - +To:+2_z@hanmail.net
11/16/2004 3:08:11 61.82.160.216 kimdh SMTPSVC1 MAIL 0 QUIT - kimdh
11/16/2004 3:08:12 211.63.136.30 id2 SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:12 211.63.136.30 id2 SMTPSVC1 MAIL 0 QUIT - id2
11/16/2004 3:08:15 211.63.136.30 id2 SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:15 211.63.136.30 id2 SMTPSVC1 MAIL 0 MAIL - +From:+k11121208@edunet4u.net
11/16/2004 3:08:17 211.63.136.30 id2 SMTPSVC1 MAIL 0 RCPT - +To:+1129lpo613158@hanmail.net
11/16/2004 3:08:17 211.63.136.30 id2 SMTPSVC1 MAIL 0 QUIT - id2
11/16/2004 3:08:19 61.82.160.216 kimdh SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:20 61.82.160.216 kimdh SMTPSVC1 MAIL 0 MAIL - +From:+q11121208@yahoo.com
11/16/2004 3:08:20 61.82.160.216 kimdh SMTPSVC1 MAIL 0 RCPT - +To:+2_yap@hanmail.net
11/16/2004 3:08:20 61.82.160.216 kimdh SMTPSVC1 MAIL 0 QUIT - kimdh
11/16/2004 3:08:36 211.63.136.30 id2 SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:36 211.63.136.30 id2 SMTPSVC1 MAIL 0 MAIL - +From:+x11121208@hihome.com
11/16/2004 3:08:36 61.82.160.216 kimdh SMTPSVC1 MAIL 0 HELO - #NAME?
11/16/2004 3:08:38 211.63.136.30 id2 SMTPSVC1 MAIL 0 RCPT - +To:+shamoonn@yahoo.co.kr
11/16/2004 3:08:38 61.82.160.216 kimdh SMTPSVC1 MAIL 0 MAIL - +From:+d11121208@weppy.com
11/16/2004 3:08:38 61.82.160.216 kimdh SMTPSVC1 MAIL 0 RCPT - +To:+200000000000@hanmail.net
11/16/2004 3:08:38 211.63.136.30 id2 SMTPSVC1 MAIL 0 QUIT - id2
11/16/2004 3:08:38 61.82.160.216 kimdh SMTPSVC1 MAIL 0 QUIT - kimdh
Post #: 1
RE: Doubt about the Exchange relay. - 16.Nov.2004 11:24:00 PM   
rytmehans

 

Posts: 848
Joined: 10.Jul.2004
From: Denmark
Status: offline
Hi,

It looks as if your server is being used as a relay. This might help you confirm: http://www.vamsoft.com/orf/authattack.asp

(in reply to Winfax)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2000] >> Server Security >> Doubt about the Exchange relay. Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter