No, a relay is when one outside party sends an email to a second outside party via your mail server, which is not the case here.
The spammers send emails to "[EMAIL PROTECTED]". The problem is that "userxxx" doesn't exist on "yourdomain.com". In addition, the From: field has been forged with a non-existant address, which causes your system's NDR to get bounced back to you as undeliverable. Does that help? Regards, Mike -----Original Message----- From: Karon Miller [mailto:[EMAIL PROTECTED]] Sent: Thursday, August 15, 2002 12:58 PM To: Exchange Discussions Subject: RE: Anonymous messages in the outbound queue So if an NDR is trying to go to faked addresses used by SPAMMERS, then does that mean that my server is being SPAM RELAYED? I've done the Relay test and it's not being used as a Relay so are they getting in some other way? When I called Microsoft they say it's from a misconfigured firewall but my firewall guy says "impossible". So, I'm back to looking at the Exchange server. Any other ideas? Thanks! It's normal. They're NDRs, and probably NDRs trying to go to the faked addresses used by spammers. Feel free to delete. > > -Peter > > > -----Original Message----- > From: Karon Miller [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, August 13, 2002 9:50 > To: Exchange Discussions > Subject: Anonymous messages in the outbound queue > > > I've tried several things to prevent messages getting stuck in the> > Outbound queue of the IMS it's like someone is relaying SPAM off of > us. I've installed Trend Micro's InterScan 5 Messaging Security Suite > and tried to block anonymous messages that way. Are they NDR's or > messages to user's that are no longer here? Normally I just delete > them everyday but I'm concerned that we're being a relay of somekind. > Is this normal for Exchange 5.5 > > Thanks! > Karon > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > ______________________________________________ > This message is private or privileged. If you are not the person for > whom this message is intended, please delete it and notify me > immediately, and please do not copy or send this message to anyone > else. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
