Telnet [external ip address] 25 HELO KIM.YAHOO.COM MAIL FROM: [EMAIL PROTECTED] RCPT TO: [EMAIL PROTECTED] DATA Enter a bunch of text, closing with [enter][period][enter]
If [EMAIL PROTECTED] receives the email, you're open. However, it doesn't look to me like your Exchange server is really responsible for this. It looks to me like your Exchange Server will happily relay for your gateway SMTP product, which is where you need to secure your relaying. To Exchange, it looks like the mail is coming from 10.x.x.x or whatever, which is in its list of "can relay" addresses. -----Original Message----- From: Kim Schotanus [mailto:[EMAIL PROTECTED]] Posted At: Thursday, February 14, 2002 9:01 AM Posted To: MSExchange Mailing List Conversation: open relay Subject: RE: open relay okay, i have restarted the smtp and pop3 services, maybe this will help. How do I test this myself? Kim -----Original Message----- From: Tom Meunier [mailto:[EMAIL PROTECTED]] Sent: 14 February, 2002 3:43 PM To: Exchange Discussions Subject: RE: open relay Okay, I don't know about the technet article, but here's your checklist: Open the smtp virtual server's properties page. On the "access" page, authentication button, leave it set to allow anonymous. This allows you to get internet mail. On the same page, relay button, click "only the list below" and grant access by IP address, range, or domain name. (Double-check this: Are your criteria too broad?) If you have external SMTP clients, put a check in "allow all computers which authenticate..." so they can relay when they're on the road.\\ That's it. No more difficult than that. If you're still relaying after you're certain you've locked it down, create another virtual smtp server and delete the first, because something's very wrong. Except if you're me, in which case you'll start & stop the SMTP service 27 times, questioning your sanity. Oh, do you have a gateway filtering or antivirus product in place? Who is it that answers when I telnet to 213.177.134.28? That's not the standard Microsoft Exchange header. -tom -----Original Message----- From: Kim Schotanus [mailto:[EMAIL PROTECTED]] Posted At: Thursday, February 14, 2002 8:40 AM Posted To: MSExchange Mailing List Conversation: open relay Subject: RE: open relay I have 1 smtp virtual server, 1 pop3 virtual server and no connectors... -----Original Message----- From: Tom Meunier [mailto:[EMAIL PROTECTED]] Sent: 14 February, 2002 3:35 PM To: Exchange Discussions Subject: RE: open relay Are you talking about mail.intas.be? Yeah, it's open. How many E2k virtual servers do you have? Do you have any SMTP connectors? -----Original Message----- From: Kim Schotanus [mailto:[EMAIL PROTECTED]] Posted At: Thursday, February 14, 2002 8:38 AM Posted To: MSExchange Mailing List Conversation: open relay Subject: RE: open relay I haven't done any testing, don't know how to... the hostmaster at our ISP has done a test and was able to send mail via our server... How do I test it myself? -----Original Message----- From: Daniel Chenault [mailto:[EMAIL PROTECTED]] Sent: 14 February, 2002 3:33 PM To: Exchange Discussions Subject: Re: open relay Why do you say "it seems to be" an open relay? What testing have you done? ----- Original Message ----- From: "Kim Schotanus" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Thursday, February 14, 2002 8:24 AM Subject: open relay Hi, I followed the steps described in http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur ity/mail/excrelay.asp but still my server seems to be an open relay... Help! Kim _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
