Sfunny, I can't relay through your machine, but that's only a basic
test.  I believe abuse.net do more intensive testing.  Which test did
they fail you on?

SB

-----Original Message-----
From: Jesse Rink [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 21, 2001 2:48 PM
To: Exchange Discussions
Subject: RE: People using my IIS SMTP relay


Hehe... I was wondering where the link was in the first message.
Anyway, I tested it out (I had to register on the site first) and it
told me the host (me) DOES appear to accept messages for relay.  Not
good.

Ok, I still don't understand why I could not relay myself from my home
PC.  When I telnetted to port 25 of the server from home I couldn't do
it and all the commands I entered resulted in 550 (unrecognized command)
errors or no response at all.  How did this website manage to get
relaying to work when I couldn't?  If anyone wants to try connecting to
my relay, feel free.  The outside IP address is 169.207.144.68.  See if
it works for you or not.

Second, since relaying is obviously open... I need help figuring out how
to turn it off.  If anyone has experience configuring IIS SMTP let me
know.  It must be the settings within IIS but I'm not sure what to
change without losing the ability to relay messages for whitnall.com (my
domain).



> Might help if I included the URL  -- OOOOOPs!
> 
> http://www.abuse.net/relay.html
> 
> -----Original Message-----
> From: STEVE BROOK=20
> Sent: Wednesday, November 21, 2001 2:25 PM
> To: Exchange Discussions
> Subject: RE: People using my IIS SMTP relay
> 
> 
> Use this URL to setup an external test on your mail system.  You can 
> test your system without being blacklisted.
> 
> SB
> 
> -----Original Message-----
> From: Jesse Rink [mailto:[EMAIL PROTECTED]]=20
> Sent: Wednesday, November 21, 2001 2:19 PM
> To: Exchange Discussions
> Subject: People using my IIS SMTP relay
> 
> 
> Well, after making sure my IIS 4.0 SMTP relay server was not infected 
> by the NIMDA virus and applying all the MS01-044 IIS cumulative 
> security bulletin, I am still being used as a relay point.
> 
> The most confusing thing is: I can't understand how they are doing it 
> because when I telnet into the IIS SMTP relay from HOME, it DOESN'T 
> allow me to relay.  The following shows up:
> 
> 220-w-smtp01.whitnall.com Microsoft SMTP MAIL ready at Wed, 21 Nov 
> 2001 08:16:19  -0600 Version: 5.5.1877.197.19
> 220 ESMTP spoken here    =20
> 
> At this point I try and type "Helo me", "Mail From:", or other 
> commands, and they ALL fail with either a) a 550 error, b) no 
> response.
> 
> If on the other hand, I telnet into the SMTP relay from a PC here on 
> the LAN I can issue "Helo me", "Mail From:" or other commands and use 
> it as a relay without problem.
> 
> What I'm looking for is someone running IIS SMTP services to help me 
> out here.  My IIS SMTP relay is in my DMZ Interface and my (1) 
> Exchange server is on the Inside Interface of the firewall.  I'm 
> worried that our domain will start getting banned or black listed (I 
> heard this happens) because we are being used as a relay point.  This 
> is the 2nd day it's been occuring and I need to get this fixed soon.
> 
> If you can help, please let me know.  Thanks.
> 
> Jesse Rink
> [EMAIL PROTECTED]
> 
> 
> 
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to