Security

Ask something
Discussion Locked

spam mail

0 helpful
5 replies

by jarif93

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

we were notified by our ISP that spam mail beeing generated from your network,which we did not know anything about and we dont know where and how.we use private ip addresses.cable connection.
NT domainand windows 2000 pro workstations(25)
any idea,any one?

5 replies

by joseph moore

Do you run a SMTP server anywhere? Please remember, that IIS does have its own SMTP server. So, if someone is running IIS as a web server, they also might have loaded the SMTP server. And the SMTP server in IIS can be used as an "open relay server" which is what spam mail is sent through.
So, check your machine(s) that are connected via the cable connection to see if they are running the SMTP engine. If so, then that is being used by external people.

Try going to this site:
http://www.ordb.org/
and lookup the IP address of your system(s) to see if they are listed. There are also links on the ORDB site on how to stop being an open relay SMTP server.

Good luck

This discussion is closed to new replies.