My server has been compromised, are there any Gurus out there??

[wannaBgeeksquad]

Heres the issue, late last night i ran a blacklist check and it turned out i was on one of them. So i looked in the mail que and froze everything, i can see that 99% of these spams are coming from sender: "ebay member: Blue Bellvue" <email.confirm@ebay.com> after i froze everything i had a little trouble figuring out how to clear the queue so mail could flow again (after i froze the queues mail flo stopped). So i figured that out, but now im seeing that SAME DAM SENDER spamming through my domain, how the hell do i stop this??!?!?!?!

Im desperate please help...

 

[Koonan]

Have you configured your mail relay settings on your server? Have a look at this, to help your test and configure your mail relay properly.

http://support.microsoft.com/kb/895853/en-us

 

[58sniper]

IMF
Connection Filtering
Sender Filtering
Recipient Filtering
Tarpitting

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[wannaBgeeksquad]

thanks for the tips guys. im workin on it. i installed service pack 2 to get IMF, but i cant seem to find it. where im supposed to. to i have to do a seperate install for IMF??

 

[58sniper]

Google is your friend

Exchange Intelligent Message Filter

http://www.microsoft.com/technet/prodtechnol/exchange/downloads/2003/imf/default.mspx

Intelligent Message Filter version 2 (IMF v2)

http://www.msexchange.org/tutorials/Intelligent-Message-Filter-version-2-IMF-v2.html

How can I configure Exchange 2003 to block unsolicited commercial e-mail (spam) with Intelligent Message Filter?

http://www.petri.co.il/block_spam_with_exchange2003_imf.htm

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt