Are we generating spam?

[jerasi]

Hi,
I found out by one of our customers that we are being black listed by his ISP, the reason is too much spam is being generated from our servers. We do not send any spam!
We have two web servers running IIS5 and Win2K (one of them is running SQL too). Can the spam be generated from those web servers? I scanned both machines for viruses and nothing was found. Both machines are fully patched.
I hate to think we actually help spammers so please, any help would be very appreciated.

Let me put it this way:
While StressLevel Is High
Productivity -= 1
Marriage = Nothing
End While

 

[PBurcin]

Best way to find out if you are relaying email for others is to submit your mail server's address to the ORBS site.

http://openrbl.org/

 

[MichealC4]

It is possible. Also, have you tested for open relays on your server?

----------------------------
"Security is like an onion" - Unknown

 

[Albion]

After all is said and done you need to contact the backlist that is being used or the ISP in question and prove to them that you have solve the problem to get off their black list. Most of them are more then happy to oblige if you prove that you are no longer able to relay.

-Al

 

[jerasi]

It's not a relay problem. I tested my mail server and webservers and all relay attempts were denied.
I asked someone to take a look at our mailserver (It's a FreeBSD machine) and he said the spam is being sent from our webserver (running ColdFusion and Asp.NET) I scanned the server for viruses and it came up empty.
Does anyone know how spammers would use a webserver to send emails?
Thanks.


Let me put it this way:
While StressLevel Is High
Productivity -= 1
Marriage = Nothing
End While

 

[fs483]

Bad script could be the cause. Do you have any sort of online forms, maybe someone found a weaknest in your script...