Spam...!

You have an open relay

Hendricks86@acsinc.net designates

client-ip=88.252.36.130

Close it up

http://www.clarkecomputer.com/info/openrelay.html

Hi BFilmFan,

Greetings,

I double check with this side http://www.dnsgoodies.com/index.htm and other too and as per your link you sent me, I don?t have open relay on my server.
And the link http://www.petri.co.il/preventing_exchange_2000_2003_from_relaying.htm. you sent me, here it is block by my ISP, it will be greatful if you kindly provide me some other one.
See I have one gateway installed Trendmicro InterScan Messanging Security Suite [IMSS] which receives all incoming mails from the firewall scan it and send it to exchange server, even my gateway IMSS is also not open relay, I tested it to relay one test mail which denied by IMSS. And then all outgoing mails are sent by exchange to smart host i.e. IMSS gateway then IMSS relay all mails to firewall / ISP.
In IMSS I had configured it to block these domain but the problem reamins samel
But I am gettings spam from the following domains and there IP: -

1. Hamm88@keystonelabs.com designates 64.72.118.211
2. Matt.Henson@accunetmortgage.com designates 85.103.24.186
3. Herrera94@rentvri.com designates 85.97.88.221
4. Richey02@nash.tds.net designates 88.247.5.247
5. Andrew.Johnston@aabc.bc.ca designates 78.168.35.231
6. Booth51@cityofchino.org designates 88.244.179.1
7. Lacy13@tclab.com.tw designates 64.72.118.176
8. Erickson45@lone-star-tankers.com designates 88.241.64.245
9. Paul82@abtravel.com designates 88.245.62.179
10. Holcomb14@onebane.com designates 88.235.206.98
11. Tyler.Laird@acstatic.com designates 78.174.32.223
12. Whittaker42@aaronsap.com designates 85.102.142.43
13. Bob.Cornell@a1bizcards.com designates 64.72.122.169
14. Hamm88@keystonelabs.com designates 64.72.118.211
15. Kathy.Robbins@srgnc.com designates 64.72.118.155
16. Lawson78@aaaservers.net designates 64.72.118.156
17. Cody31@aalen.de designates 89.48.26.118
18. Basil.Hanley@a-clue.com designates 85.104.64.125
19. Hatch29@allenweinercpa.com designates 208.110.91.26
20. Street84@aacom.net designates 88.250.16.64
21. Holcomb14@onebane.com designates 64.72.122.169
22. Woodall46@rilasoft.com designates 64.72.118.187
23. Whittaker42@aaronsap.com designates 81.213.235.29
24. Lundy49@bomoon.com designates 78.160.0.145
25. Clark52@acsi-inc.com designates 85.104.246.84
26. Ramey24@ahfitz.com designates 64.72.122.169
27. Christie63@aa.mbn.or.jp designates 64.72.118.210
28. Lawson85@wax.nu designates 88.253.53.185
29. -r.retail.telecomitalia.it ([82.57.150.246])
30. Hilton55@bmasports.com designates 64.72.118.176
31. Langford18@adbusters.no designates 88.241.255.7
32. Justice80@abcdrduson.com designates 88.233.51.3
33. Justice80@abcdrduson.com designates 88.233.51.3
34. Pace33@accutrac.com designates 208.110.91.10
35. Delacruz14@ace-ag.ch designates 208.110.91.18

These are the domain name and IP from I received spam yesterday but today the domain name and IP are differents find below one spam?s mail header: -
************************************************************************
Microsoft Mail Internet Headers Version 2.0
Received: from mygateway.mydomainname.com ([192.168.100.16]) by server.mydomainname.com with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 3 Sep 2008 08:58:05 +0400
Delivered-To: To: sanjana@mydomainname.com
Received: by 10.119.250.18 with SMTP id x18cs281997muq; Wed, 03 Sep
2008 00:57:07 -0500 (PDT)
Received: by 10.115.275.10 with SMTP id c00mr2919658ybg.191.1726460164668;
Wed, 03 Sep 2008 00:57:07 -0500 (PDT)
Return-Path:
Received: from n81.bullet.mail.mud.yahoo.com (n31.bullet.mail.mud.yahoo.com
[81.213.111.215]) by mx.google.com with SMTP id
5si2674079ywl.4.2008.08.22.26.07.16; Wed, 03 Sep 2008 00:57:07 -0500
(PDT)
Received-SPF: pass (google.com: domain of Mcnally00@koolcom.net designates
81.213.111.215 as permitted sender) client-ip=81.213.111.215;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
Mcnally00@koolcom.net designates 81.213.111.215 as permitted sender)
smtp.mail=Mcnally00@koolcom.net; domainkeys=pass (test mode)
header.From=Mcnally00@koolcom.net
Received: from [68.142.192.250] by n01.bullet.mail.mud.yahoo.com with NNFMP;
Wed, 03 Sep 2008 00:57:07 -0500
Received: from [76.13.11.22] by t2.bullet.mud.yahoo.com with NNFMP; Wed, 03
Sep 2008 00:57:07 -0500
Received: from [76.13.15.158] by t9.bullet.mail.ac2.yahoo.com with NNFMP;
Wed, 03 Sep 2008 00:57:07 -0500
Received: from [127.0.0.1] by omp124.mail.ac9.yahoo.com with NNFMP; Wed, 03
Sep 2008 00:57:07 -0500
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 745303.09743.bm@omp099.mail.ac6.yahoo.com
Received: (qmail 5376 invoked by uid 60001); Wed, 03 Sep 2008 00:57:07 -0500
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-T
ype:Message-ID;
b=ihWzks16rHLG4ivVUaQPEXNLo4wgqDhrcm6Rkszt5xmi5699J9BYUgeq90p807hb8rJbwPm2q
bi5buQG7xoX/x/SARs9U230cGGsMiUdcluKkVSO/IotEBEllWLaNHxwovoFIqpc15SGZJWPXxoN
8LTbePt1nfIHxiIWaSPxPEI=;
X-YMail-OSG: YtddQHAVM1k1YpfA3KLhDQewHq.RJqx41aZqsveLtPdrMk.QMS.wQ5di75gZXCt
tVcg--
Received: from [81.213.111.215] by web15404.mail.sp1.yahoo.com via HTTP;
Wed, 03 Sep 2008 00:57:07 -0500 PDT
X-Mailer: YahooMailRC/1293.06 YahooMailWebService/0.3.107.3
Date: Wed, 03 Sep 2008 00:57:07 -0500 (PDT)
From: Gabrielle Blackburn
Subject: Want it longer
To: To: sanjana@mydomainname.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-1761366887-1219460752=:76606"
Message-ID: <950914.38720.qm@web71950.mail.sp1.yahoo.com>
X-imss-version: 2.051
X-imss-result: Passed
X-imss-scores: Clean:1.25491 C:2 M:3 S:5 R:5
X-imss-settings: Baseline:2 C:2 M:2 S:4 R:4 (0.1500 0.1500)
X-OriginalArrivalTime: 03 Sep 2008 04:58:05.0015 (UTC) FILETIME=[A661F670:01C90D81]

--0-1761366887-1219460752=:76606
Content-Type: text/plain; charset=us-ascii

--0-1761366887-1219460752=:76606
Content-Type: text/html; charset=us-ascii

--0-1761366887-1219460752=:76606?
************************************************************************

Kindly let me know how can I get rid of this problem.

I tried each trick but...........?

Hoping to receive helpful & favourable answer.

Many Thanks!