Need Help with Open Relay 1

[spook007]

I've recently been informed that our server is an open relay. I've tested it via telnet, ordb.org and spam marshall and I've confirmed that this is the case.

My current settings for my relay restrictions are as follows:

- Only the list below
- Grant 127.0.0.1
- Grant 192.168.1.0 / 255.255.255.0
- (check) allow all comptuters which successfully authenticate to relay regardless of list above.

This opens opens up my server for public relay. I did try switching my settings to:

- Only the list below
- Grant 127.0.0.1
- Grant 192.168.1.10
- (uncheck) allow all comptuters which successfully authenticate to relay regardless of list above.

This does NOT open up my server for relay, but I cannot send any internal mail anymore. 192.168.1.10 is the internal ip for the exchange server. Any suggestions would be most welcomed... Thanks!!

 

[spook007]

I think I'm narrowing down my problem. I have a firewall (192.168.1.18) that is being included in the relay list when I grant 192.168.1.0 / 255.255.255.0.

I think that I can solve my problem if I were to simply exclude the firewall from my grant list. I think the only option I have is to modify my subnet mask, I really suck at figuring what to change my subnet mask to!

 

[Jeepix]

You shouldn't need any IP's in the list and you should check 'allow all computer which successfully authenticate'...

Usually, the only time you need to modify the Relay list is if you have another server that has an application that needs an SMTP server to relay mail off of.

Try my suggestion above and you *should* be OK.

 

[imstech]

You may also want to see if you AV program has that port closed. McAfee's ePO automatically closes port 25 even if you had manually opened it.

 

[spook007]

Jeepix;
Thanks that did it... I was under the understanding that I needed to put something in there. I'm so happy to have this under control!!! Thanks a million!