General discussion

Locked

Am i being relayed

By anthonyc ·
After doing some research on the net I thought I had my exchange server secured against mail relaying. This morning however I find this message in my inbox
?A mail message was not sent due to a protocol error.
572 Bounces are blocked due to systemabuse by spammers The message that caused this notification was:

To: <jack484@myrealbox.com>
From: <>
Subject: Undeliverable: increased traffic generates sales
?

This scares the **** out of me. I someone using my server asa relay?
I run an WinNT Server with Exchange 5.5 SP3 behind a Firewall. What, other than the usual routing comnfigs in exchange can I do to protect myself and how can I tell if someone has used me a s a realay? Are there any monitoring tools out there to see if someone is abusing my server?
Thank you
Anthony

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Am i being relayed

by McKayTech In reply to Am i being relayed

There are two issues here, really. Mail that really does get relayed through your server, and mail that only appears to have been relayed through your server. Proper configuration of your Exchange server can fully prevent the first but the second is far more difficult.

The best monitoring tool is probably going to be within Exchange server itself. If you turn up the diagnostic logging level in the Internet Mail Service, you'll capture information about relay attempts (and/or successes if the configuration is not right).

A firewall, by itself, is not much protection against spam relaying unless it has pretty highly developed Intrusion Detection capabilities or you are running a mail scanning program like Webshield along with it.It's a frustrating problem - spammers are slimy little dudes and have shown some pretty creative thinking...

paul

Collapse -

Am i being relayed

by anthonyc In reply to Am i being relayed

Poster rated this answer

Collapse -

Am i being relayed

by anthonyc In reply to Am i being relayed

This question was closed by the author

Back to Software Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums