How do I determine whether my exchange server is being used to relay SPAM

This is a multi-part message in MIME format.

------=_NextPart_000_0018_01C41E7A.F70E2800
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

We have recently changed from Exchange 5.5 to 2003. We have also =
instituted an signature program for our outgoing email. This week I have =
been getting NDR's from sites and some say that our site is sending them =
SPAM. I beleive that either these sites are registering the signatures =
as SPAM or our server is relaying SPAM messages. How do I determine =
this, I imagine that some logs would show this but which ones and do =
they have to be enabled.
------=_NextPart_000_0018_01C41E7A.F70E2800
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>We have recently changed from Exchange =
5.5 to 2003.=20
We have also instituted an signature program for our outgoing email. =
This week I=20
have been getting NDR's from sites and some say that our site is sending =
them=20
SPAM. I beleive that either these sites are registering the signatures =
as SPAM=20
or our server is relaying SPAM messages. How do I determine this, I =
imagine that=20
some logs would show this but which ones and do they have to be=20
enabled.</FONT></DIV></BODY></HTML>

------=_NextPart_000_0018_01C41E7A.F70E2800--

0
frelaxx (3)
4/10/2004 1:34:44 AM
exchange.admin 57650 articles. 2 followers. Follow

4 Replies
349 Views

Similar Articles

[PageSpeed] 58

E2003 is not an open relay by default - you'd have to have enabled it. I
doubt
your signatures are the culprit here. Authenticated relay is enabled by
default, however. If you aren't careful, your server may be exploited for
authenticated relay, however....see
http://www.vamsoft.com/orf/authattack.asp. You can turn up SMTP logging to
see whether you're being used as a relay.

Frank Toner wrote:
> We have recently changed from Exchange 5.5 to 2003. We have also
> instituted an signature program for our outgoing email. This week I
> have been getting NDR's from sites and some say that our site is
> sending them SPAM. I beleive that either these sites are registering
> the signatures as SPAM or our server is relaying SPAM messages. How
> do I determine this, I imagine that some logs would show this but
> which ones and do they have to be enabled.



0
lanwench (7567)
4/10/2004 1:49:10 AM
"Frank Toner" <frelaxx@optonline.net> wrote in
news:UaIdc.1327$Eg.550622@news4.srv.hcvlny.cv.net: 

> We have recently changed from Exchange 5.5 to 2003. 
> We have also instituted an signature program for our outgoing email.
> This week I have been getting NDR's from sites and some say that our
> site is sending them SPAM. I beleive that either these sites are
> registering the signatures as SPAM or our server is relaying SPAM
> messages. How do I determine this, I imagine that some logs would show
> this but which ones and do they have to be enabled.

This is a little bit outdated, but still good information about relaying. 
If you didn't change the default settings you should be okay.

http://www.slipstick.com/exs/relay.htm

Regards,

-- 
Arlo Clizer
Exchange MVP
FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://groups.google.com
0
aclizer1 (399)
4/10/2004 1:52:04 AM
Go to http://msv.dk for a test. It's a very good test. 
0
anonymous (74722)
4/26/2004 9:41:03 AM
If you use this test, Exchange Server 2003 will fail three of the
tests. This is because Exhcnage Server accepts the message, tellls the
sender it will send it, but never does (it will send a NDR)

After running this test, check your Exchange Server log for more
details. 

On Mon, 26 Apr 2004 02:41:03 -0700, David Peters
<anonymous@discussions.microsoft.com> wrote:

>Go to http://msv.dk for a test. It's a very good test. 

PeterD, the Darkstar Network
To email, fix my address!
ExpertZone!
0
Peter
5/2/2004 12:15:32 AM
Reply:

Similar Artilces:

Exchange in SBS2003 R2
I installed Windows SBS 2003 R2 on a Dell server, everything was working well untill I got the whole network on it. I have about 40 users with mailboxes but a max of 25 users is logon at anytime. The problem I am having is Outlook clients are performing very slow. Other services such as printing and file access are not affected. Now I am wondering if I shouldn't used SBS 2003. I did a little research before going with SBS and found that many people are using SBS2003 with about 40 - 50 users. Here are my Dell PowerEdge 1800 Server Specs 4 160GB SATA 7200 RPM HDD on a RAID 5 confi...

Changing SQL Server for CRM 1.2
As my SQL server is currently on its last breath I am in the process of moving our CRM 1.2 databases to a new dedicated serever. I have detatched the databases from the old server, copied the files to the server and attached them. I have then gone into CRM deployment manager and changed to the SQL server to the new server. That all appears to work fine, no error messages. But when users try to access the CRM system they get an error and the CRM server event log fills with error messages. A few are listed below: dmLog: Failed to execute the SQL batch in the file sqlbatch.sql. MSCRM P...

Business Portal Error-SQL server does not exist or access denied
Hi, We are running business portal 4.0 for one of our customer. It was running correctly, however, they have changed the SQL server port (previously it was set as default 1433). After that the business portal becomes very slow and while creating a new request (purchase requisition) if we open the item pop up; it is showing exception "SQL Server does not exist or access denied...." Can any body tell me how can I provide the new port number to business portal connection to the database. Thanks and Regards, Waliullah, Thanks for using the newsgroups. I have a...

Can't insert Char(1) into SQL Server from Stored Procedure
Hello I am trying to insert a char(1) field into a table from an ASP.Net/C# application. At first I was inserting rows into the table but none of the columns that I was inserting the rows into were char(1) columns, they were mostly int and varchar columns. Then I found out that there was one column in the list that was not supposed to be an int column but instead it was supposed to be one of the char(1) columns into the table. So I replaced the int column in the list with the char(1) column and since the value of the char(1) column resulted from a CheckBox ('Y...

How disable postmaster reply in exchange 5.5
I receive mail from virus in my Exchange 5.5 with this format name@mydomain with a virus attached My exchange server reply with postmaster with the original mail attached. I think that this is Mydoom virus. Please help me to disable NDR messages for any e-mail sent to an invalid address. Virus send e-mail with field FROM with addres that want attack and my exchange reply with postmaster with the original mail that contain mydoom virus. Excuse me for my bad english. It is not possible to disable generation of NDR with E55. Why not install antivirus for Exchange? ALEX wrote: > I rece...

Using mouse wheel in VB editor
Just tried using the mouse wheel to scroll within visual basic editor in excel but it wont let me. How can I turn this feature on. I am using Excel 2003. Thanks in advance. This is a known problem with the latest MS mouse drivers. You can either install version 4 of the drivers (current version is 5), or use FreeWheel, and freeware program at http://www.geocities.com/SiliconValley/2060/freewheel.html . -- Cordially, Chip Pearson Microsoft MVP - Excel Pearson Software Consulting, LLC www.cpearson.com "fullers" <fullers@discussions.microsoft.com> wrote in message ne...

Delegates for SBS2003 Exchange
have SBS2003 Eexchange. users can delegate their folders in Oultook client, but does not have the properties button available after adding users from global address list, to set permissions on folders....the button is grayed out. Do I have to enable this feature somewhere on the server in excahnge manager or AD? ...

Relay from unstruted server
A certain IIS SMTP server in my company maintained by junior admins got its IP address added to SPAM list at MSN. The junior admins came asking me to allow relay from their insecure server to the Exchange 2000 server that I maintain. My recommendation is that they work with MSN to get their IP address removed from that spam list. Is that likely that MSN/hotmail would remove them from their Spam list ? If so, who would be the contact phone# at MSN to do that ? Do you agree that I should not allow relay from the IIS SMTP to the Exchange server if that IIS box it is not secure and not maintai...

Send to certain person using specific email account
I send an email to a certain receipient but don't want to use the default email account. Is it possible that when I send to them (plain text) , that it will choose the other account I want to use to send it? Please advise how I set this up. Thanks. I do not believe that this can be achieved automatically through standard use of Outlook as you need to manually specify the name of the account to send from if different than the default. However, it would be possible using the Outlook object model. An Addin would need to be developed that monitored each mail item prior to sending. If the d...

Windows Server 2008 R2 04-09-10
Windows Server 2008 R2 and Windows 7 share the same code? how is that possible when Windows 7 has both 32 bit and 64 bit versions and windows server 2008 r2 is only 64 bit Hello Charle, As Microsoft is going to use only 64bit versions for servers they don't built the 32bit version. Sharing the same code doesn't mean that the server OS use exaclty the same files, there are a lot more and different ones. But the basic code is the same. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ...

Use exchange from a trusted domain
Hi folks, I have domain a and domain b. Domain a is all set upp with exchange etc. Domain b was bought, and they don't have exchange. I have trust between the domains and file sharing and authentication are ok. What we want to do is, make users on domain b and let them use the exchange (on a seperate storage) on domain a. The users on domain b must logon to domain b, but need to have mailbox on domain a. Domain a are running on win2003 and exchange 2003. Domain are running on win2003 with forest and domain ready for exchange. Any advices? thanks in advance, - Bjarni Hi, Thi...

Relay Servers?
Is there a free or pay service that will alow me to relay my mail through them? I have a online business and use a cable modem from home. My customers that are with AOL do not recieve my Emails. I figure that i can overcome this if I can relay my mail. TIA Josh Please contact your ISP, maybe they can provide one. As far as I know, AOL and Version has this business. Note: Version's relay server may be not compatible with Exchange server "Josh" <jsawyer@insightbb.com> wrote in message news:ePSn%23r2LFHA.1472@TK2MSFTNGP14.phx.gbl... > Is there a free or pay se...

Microsoft Exchange Server
I am using Outlook 2003 for my emails from microsoft exchange server. A few days back I neede to reinstall my windows. Everything with the installation and configuration goes fine at my outlook 2003 but I am unable to get back all of my inbox and Sent items from my microsoft exchange server. I can see some of the items in my inbox and some in sent items however a lot of things are still missing. Can anyone help for this problem? Early response is highly appreciated. Thankyou all, Best Regards, Rizwan. Submitted using http://www.outlookforums.com Are all messages shown whe...

Change the Exchange Virtual Directory to different website
I would like to remove the exchange virtual directory default website and move it another website which is currently redirecting to the website I want to delete. Meaning rather than logon to OWA as http://www.wheresmylunch.com/exchange (current default website) I want to move to http://www.getyourownsandwich,com/exchange. I am using Exchange 2000 server. Rube You would change the host header on the current website. -- Hope that helps, Dan Townsend This posting is provided "AS IS" with no warranties, and confers no rights. Please do not send email to this address, post a reply t...

Using Access 2003 on client to see Sharepoint 2007
Testing a Sharepoint environment and I can easily manipulate and run the database from Access 2007, but when I try to use Access 2003 it wants me to save the database to a location. The Access 2003 has the compatiblity pack, but it seems to not work when I download it. So the question is using Sharepoint 2007 and posting the Access 2007 format to it, can a user go to the sharepoint site and use a 2003 Access database that has the compatibility pack and open without having to download it? -- Message posted via http://www.accessmonster.com Send check for $500.00 to: David A Jenn...

IE 7 / Win2k3 x64 server things pop-up blocker is on
I have a problem with one server where it thinks the pop-up block is on when it is actually not. I disable the pop-up blocker for all zones in group policy but I continue to receive messages from websites that pop-ups are disabled and that I need to enable them. I don't understand how this can be the case unless IE is doing something its not telling me about. Any ideas? PS IE ESC is disabled on this server. IE ESC was disabled before terminal services was installed. thanks Pete > ...I continue to receive messages from websites that pop-ups are > disabl...

Spam is a big big problem
Spam is a big big problem ...

Effectively stoping open relay.
I have a client who started using exchange 2003 few days back. This client is having more than 12 subnets starting from 172.27.50.0, 172.16.0.0 to 172.27.0.0 and 10.172.172.0 & 10.172.173.0 subnets in different location in town which are conneted by DSL. This users are connecting to the Exchange server 172.16.5.25. Most of these users are POP3 users. I have 2 SMTP Virtual Server running. Default SMTP Virtual server 172.16.5.25 and the second for Externel. In the Mail connector I have added only the external as the local bridgehead server. In the relay properties of the internal I...

I want to add a mail account without setting a SMTP server. Is it possible?
I want to add a second mail account that is outside my company. Since the company firewall does not allow us to connect to SMTP-servers I want to add this account without setting the SMTP propertiy. I cannot specify the company server as it is an Exchange server and the outside one an IMAP one. Currently I have specified the outside SMTP server since outook does not allow me to add an account wihtout setting this. I keep getting annoying error messages as my computer can't connect to the outside SMTP. Any one know a way around this? cheers, mortb The company server has SMTP enabled, u...

2 Domains, 1 Exchange Server
Hi, We're trying to go with 2 seperate 2003 domains, but with only one Exchange 2003 Server. What would be needed for the domain that the Exchange server is not in to access e-mail? We've contemplated having those users use OWA, but would really like them to be able to use Outlook 2003. We're a school district and want to segregate the kids domain from the administration domain, but only have funding for one Exchnage server. Any ideas\help will be appreciated. TIA. Hi, This should explain what it requires: http://support.microsoft.com/?id=278888 Leif "tj woo...

How Use ShellExecute with a CMemFile
Hello, I need to store files of various types (such as .doc, .xls, .jpg, .pdf, ..wmv, ...) in a database. Upon retrieval of such a file I have the file as data in memory in a CMemFile. I need to then "display" the file in the aproriate application. If I were to write the CMemFile to disk and create an actual file I could then, of course, use ShellExecute() to launch , say Word to display a .doc file. However, I would much prefer to avoid the overhead of writing the data to an actual file and then dealing with having to detect when the User is done and cleaning up the file I had ...

Create Exchange mailbox from command line
I'm writing a script using dsadd and I was wondering if it's possible to create an exchange mailbox from the command line. Donovan Maybe not exactly what you want but it may help: http://www.joeware.net/win/free/tools/exchmbx.htm -- Neil Hobson Exchange MVP For Exchange news, links, and tips, check: http://www.msexchangeblog.com "Donovan Linton" <DonovanLinton@discussions.microsoft.com> wrote in message news:D9C839EF-883D-4E2E-8BE9-57782582F043@microsoft.com... > I'm writing a script using dsadd and I was wondering if it's possible to > create an ...

Delivery Status Notification (Relay)
New to exchange server 2003...we are running outlook 2003. When I send E-mails outside the corp. I am now getting a message from the postmaster.mycompany.com that the message"Delivery Status Notification (Relay)" has been put in the message field with attachments with the info. I had e-mailed. Looks like the e-mail is being relayed...I didn't set this up. Why would this happen? Thanks ...

Can i use conditional formating on a cell when it contains a formula?
I am trying a "conditional formatting" on a cell that contains formula, but it didn't work. "If cell value is equal to 0 then font - white" This doesn't work, stays always. If i use this condition on a cell without formula it works just fine. Thank -- si ----------------------------------------------------------------------- sit's Profile: http://www.excelforum.com/member.php?action=getinfo&userid=262 View this thread: http://www.excelforum.com/showthread.php?threadid=26784 Hi are you sure your formula returns an exact zero?. Could you post the formul...

Using INDIRECT within functions
I learned a bit from JLathman in a previous post but tried to use the same methodology with this formula (also learned from this Group to get the last entered value in a column) without much luck. The original formula was this with 2009 sheet being static: =LOOKUP(2,1/('2009'!H3:H65536<>""),'2009'!H3:H65536) Trying to make it dynamic I tried the following without success: =LOOKUP(INDIRECT("2,1/(" & O1 & "!$H$3:$H$65536<>"")," & O1 & "!$H$3:$H$65536)")) Did I miss something or are...