Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Stop spammers from using my Exchanger Server

Status
Not open for further replies.

tmc3306

IS-IT--Management
Jul 27, 2000
6
US
I am using Exchange 5.0 sp 2 and NT 4.0 sp5.  From the messages in the Event Viewer it appears that someone has been using my Server to send spam.  How do I stop this from happening.  Someone mentioned stop message relay?
 
That's correct. You have to stop "relay" in the Internet mail connector to do this.
 
I have been unable to find that feature to turn it off
 
From the ORBS website, <A HREF=" TARGET="_new"> you'll find this text:<br><br>MS Exchange 5.0 can only be secured against unauthorised relaying by disabling all internal POP3/SMTP<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;access. That is, all internal clients must be running Microsoft message exchange software and email clients<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;such as Pegasus, Eudora, Netscape, etc cannot be used after the server has been secured in this way. This<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;should be regarded as a temporary fix, because eventually someone will probably re-enable<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;POP3/SMTP. Please update to MS Exchange 5.5sp2 or later as soon as possible. <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Owners of MS NT Small Business Server (SBS) 4.0 are able to upgrade to 4.5 for free or a nominal fee.<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This includes an update to MS Exchange 5.5. <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;To quickly verify a machine: Any MS Exchange mailserver which shows a version number below 5.5.2448<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;on its SMTP port is unlikely to be fully secure. 5.5.2448 is only secure by explicit configuration as MS<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Exchange defaults to no relaying control <p> Mike Hillwig<br><a href=mailto:mike@hypermike.com>mike@hypermike.com</a><br><a href= done more R5 deployments than I care to think about.
 
Guys, there's a FAQ on this.

Basically, enable SMTP routing, click Restrictions, Check Hosts with these IP addresses, then put no addresses in the list. Restart IMS & you're good.

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top