stop spamming 1

[CablingPro]

hi,
i'm running EX5.5 SP4. I thought the relaying on my box was locked down and i even tested it receiving messages 550 - relaying prohibited... When i look at my outbound queue from time to time i find there some msgs with no origin address. Is there any way to sop this, how do they even get to submit any messages while my box supposedly accepts only authenticeted connections?

thanks

 

[brontosaurus]

this is typically not a relay issue, but a semi-successful spam issue. Most likely, some spammer sent an email to "any-old-account@your-domain.com" that reached your server. Of course, since the spammer doesn't likely know the addresses of any real accounts in your domain, your server wants to send an NDR to the originator. That's what you're seeing in your outbound queue. Exchange server removes the origin address to prevent a loop from occurring in case the sender of the original email provided a bogus SMTP address, which of course, is almost always the case.