Exchange 5.5 Sp4 Still Relaying (Help)

[Phobos1821]

I've locked down my server to prevent Relaying. I have Exchange 5.5 Sp4 with Routing restrictions in place to only allow inbound routing to my domain, and only allow relaying to my local subnet. This is what abuse.net says about my server though.

Note: I have replaced my domain with MYDOMAIN.COM

Relay test 1
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<spamtest@abuse.net>
<<< 250 OK - mail from <spamtest@abuse.net>
>>> RCPT TO:<relaytest@abuse.net>
<<< 550 Relaying is prohibited

Relay test 2
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<spamtest>
<<< 250 OK - mail from <spamtest>
>>> RCPT TO:<relaytest@abuse.net>
<<< 550 Relaying is prohibited

Relay test 3
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<>
<<< 250 OK - mail from <>
>>> RCPT TO:<relaytest@abuse.net>
<<< 550 Relaying is prohibited

Relay test 4
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<spamtest@mydomain.com>
<<< 250 OK - mail from <spamtest@mydomain.com>
>>> RCPT TO:<relaytest@abuse.net>
<<< 550 Relaying is prohibited

Relay test 5
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<spamtest@[0.0.0.0]>
<<< 250 OK - mail from <spamtest@[0.0.0.0]>
>>> RCPT TO:<relaytest@abuse.net>
<<< 550 Relaying is prohibited

Relay test 6
>>> RSET
<<< 250 OK - Reset
>>> MAIL FROM:<spamtest@mydomain.com>
<<< 250 OK - mail from <spamtest@mydomain.com>
>>> RCPT TO:<relaytest%abuse.net@mydomain.com>
<<< 250 OK - Recipient <RELAYTEST%ABUSE.NET@mydomain.COM>

Seems like the %hack allows the relay, even though i have installed the post service packs.
-Q326322
-Q289258

IMCMSG.DLL Version:
MSEXCIMC.EXE Version: 5.5.2656.59

Any help would be appreciated. Thanks

 

[gutwrencher]

What are your settings under 'routing restrictions' in the routing tab under Internet Mail Service properties?

GW

 

[Phobos1821]

Currently it is

Hosts & Clients With These IP Addresses (CHECKED)
192.168.1.0 255.255.255.0

 

[gutwrencher]

check out these 2 links. Let me know if they help.

http://www.exchangeadmin.com/Articles/Index.cfm?ArticleID=7696

http://www.microsoft.com/technet/tr...chnet/security/prodtech/mailexch/excrelay.asp

GW

 

[Phobos1821]

I've followed the exchangeadmin.com article to the letter (It's pretty old, and a classic).

I've seen the other technet article, and i have followed that to the letter as well.

It looks like a hotfix issue. I may be missing a hotfix to prevent the % instead of the @ sign relaying issue. You can relay to my server is you use
name%yahoo.com
instead of
name@yahoo.com

I dunno, i have SP4 installed with all the hotfixes installed that i know of. I dont think it's a configuration issue, as it blocks all other types of relaying.

I'm just stuck. I'll run msabcli -hf on it tomorrow with slaviks XML file to make sure, but i was wondering if anybody has had any experience with this thus far.

Thanks for the help tho