Discussion Locked

Relaying and Spam

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all,

Our company is using Exchange 5.5. Our ISP recently called our attention to our being an open relay and that they are receiving a deluge of emails from our server. We have successfully configured our Exchange to stop relaying and our ISP has confirmed that our system is now closed to relaying. However, they still say that they continue to receive spam mails from our domain. We're trying to trace the origin of the spam mails and checking computers for viruses. But if all computers check out clean for viruses, is there some other cause for this problem aside from those mentioned above?

I hope someone can help. Thanks.

6 replies

by tech_wiz03

Once a spammer has your email address and routing it is possible to disguise themselves as you and use any open system on your isp's server to spoof themselves as you, thusly even though now you are closed other clients of your isp's may not be. This is a continuing open problem.

regards
rick

by bhrdwh

1. Change & harden login passwords of your domain user & admin guys (ALL USERS) to alpanumreic & atleast 8 in length. (Eg. a6h0i7k1) - it might hurt the users, but this is to save your Exchange.
Use Password Generator.

2. Check in Exchange Global List, do you have any test email accounts - usually such ids have simple or no passwords. Change them to strong ones.

3. Delete guest account & Email id (if any).

The above will reduce your spam <> emails to about 50%.

Also you could download Microsoft's IMS Queue patch.

Akash

This discussion is closed to new replies.