On the routing restrictions dialog you should select "hosts that
successfully authenticate" (this will force smtp auth) and "hosts and
clients with these IP addresses" and give your internal IP subnets, or
whoever you "trust" to relay.

I've not seen this impact OWA and can't imagine how it would as they're
separate authentication processes - at least in 5.5.

good luck.Byron

-----Original Message-----
From: David Stafford [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 24, 2001 9:59 AM
To: Exchange Discussions
Subject: RE: Securing the IMS


Using this method of TELNETing into my Exchange Server I have discovered
that I am in fact a "relay-er" I was able to send mail from a non-local
"[EMAIL PROTECTED]" to "[EMAIL PROTECTED]" and the other bogus recieved the
mail with no error or complaint from the exchange server.....

OKAY...How do I stop it.  I have tried restricting routing but that seems to
either cut off incoming or out going mail.  We are a single exchange server
(5.5 sp4) shop. Additionally, If I restrict to only authenticated OWA stops
functioning.   Any Ideas, or is there a step by step guide to this?

Thanks

-----Original Message-----
From: Olds, Dominic [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 8:48 AM
To: Exchange Discussions
Subject: RE: Securing the IMS


Aha!! Now I see.
Many thanks for this.
Have a great weekend.
Dom.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: 10 August 2001 13:00
To: Exchange Discussions
Subject: RE: Securing the IMS


Yes, this is normal.  Take a look at
<http://www.rfc-editor.org/rfc/rfc2821.txt> 

from:  6.1 Reliable Delivery and Replies by Email

If there is a delivery failure after acceptance of a message, the
   receiver-SMTP MUST formulate and mail a notification message.  This
   notification MUST be sent using a null ("<>") reverse path in the
   envelope.  The recipient of this notification MUST be the address
   from the envelope return path (or the Return-Path: line).  However,
   if this address is null ("<>"), the receiver-SMTP MUST NOT send a
   notification.  

-Mich�le
Immigration site:  <http://LadySun1969.tripod.com>
Our new 2001 Miata:  <http://members.cardomain.com/bpituley>
Tiggercam:  <http://www.tiggercam.co.uk>
---------------------------------------------------------
"The Scarlet Pimpernel Letter" - An 18th-century English nobleman leads a
double life, freeing comely young adulteresses from the prisons of
post-Revolution France. 
---------------------------------------------------------


-----Original Message-----
From: McNeill Alasdair [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 6:47 AM
To: Exchange Discussions
Subject: RE: Securing the IMS


They are probably NDRs!

-----Original Message-----
From: Olds, Dominic [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 12:38 PM
To: Exchange Discussions
Subject: RE: Securing the IMS


Thanks for this. I get a message telling me that "Relaying is prohibited"
which seems fine. However, if I look at the queue's in the IMS there are
messages with nothing in the sender field. Is this normal? If it's not stuff
being relayed then what could it be?? I'm confused! :) (well it is friday)

-----Original Message-----
From: McNeill Alasdair [mailto:[EMAIL PROTECTED]]
Sent: 10 August 2001 11:37
To: Exchange Discussions
Subject: RE: Securing the IMS


You can telnet your self into your Exchange through port 25 then follow the
artical!

http://support.microsoft.com/support/kb/articles/Q153/1/19.asp

If you can send a mail with an account that is not in your Ex Org then you
have an open relay
if you get an error then you do not relay mail!

A McNeill

-----Original Message-----
From: Olds, Dominic [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 10, 2001 12:22 PM
To: Exchange Discussions
Subject: Securing the IMS


Hi all
I have a strange problem with the IMS on our Exchange 5.5 server. (SP4
running on WIN2k)  The IMS appears to be set so as to prevent relaying but
it looks like spam is still getting relayed. Is there a simple way to prove
this suspicion one way or the other please?
Many thanks
Dom.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to