Software

Ask something
Discussion Locked

exchange 5.5

0 helpful
5 replies

by allan_oh

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm currently receiving the notification emails if there are any problem with our email server (eg. inbound and outbound mail failures etc).

I noticed that on some of the outbound mail failures, the sender is using a different email address instead of the organizations' email address - since the sender's email address is anonymous (eg. jg8983@othersite.com), I don't know if this is an actual user in the organization.

Is this a security breach I'm looking at here?

How do I track/trace it??

Thanks.

5 replies

by techdictator

Sounds like you're being spamed. If the addresses look like a randomly generated user name @msn.com or @yahoo.com or some of the other free mail systems. It's most likely spam. Use spamcop.net or samspade.org to trace the email headers and see ifthey're legitamate.

by mebudman

If you have sp2 or higher on the turn on routing restrictions.

goto the IMC property page->Routing, down at the bottom is a button 'Routing Restrictions'
click on it

click the first check box
hosts and clients that authenticate can relay
set up the second box for only computers with this address or network can relay

if you have people using Outlook Express or Outlook with internet mail, have them goto their account properties page and click the servers tab, down at the bottom is a section outgoing mail server, have them check 'my server requires authentication", leave the defaults, as it will use their logon credentials.

This will stop all unauthorized use of your smtp server.

Been there done that.

Hope this helps.

This discussion is closed to new replies.