Not.

-----Original Message-----
From: Joe Irvine [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 16, 2002 06:38
To: MS-Exchange Admin Issues
Subject: RE: Exchange 5.5 server HACKED!


Actually, no.. if you can telnet to the mail server you can relay. No hacking needed. 
This is by the very nature of exchange. I would recommend looking at not allowing 
characters like %$! Through your firewall. Here's a link to check to see if you have 
an open relay..

http://www.abuse.net/relay.html



Thanks,

Joe Irvine
Director of Information Technology
The Business Office, Inc.
(609) 597-1155, Fax (609) 597-2860
www.tbopayroll.com

 -----Original Message-----
From:   Dan Schwartz [mailto:[EMAIL PROTECTED]] 
Sent:   Tuesday, July 16, 2002 9:30 AM
To:     MS-Exchange Admin Issues
Subject:        RE: Exchange 5.5 server HACKED!
Importance:     Low


        Look at the 4031 error messages, which indicate SOMEONE is trying to relay
through the server, and since unauthorized relaying is prohibited that tells
me someone has hacked in.

>-----Original Message-----
>From: William Lefkovics [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, July 16, 2002 1:03 AM
>To: MS-Exchange Admin Issues
>Subject: RE: Exchange 5.5 server HACKED!
>
>
>Then it's sorta in production then, yes?
>
>Was there a concern other than the 4318's?
>
>-----Original Message-----
>From: Dan Schwartz [mailto:[EMAIL PROTECTED]]
>Sent: Monday, July 15, 2002 9:55 PM
>To: MS-Exchange Admin Issues
>Subject: RE: Exchange 5.5 server HACKED!
>
>
>
>       Yes, it's connected, and the DNS servers have been pointed at it
>for about a week...
>
>>-----Original Message-----
>>From: William Lefkovics [mailto:[EMAIL PROTECTED]]
>>Subject: RE: Exchange 5.5 server HACKED!
>>
>>
>>Is it connected to the internet?
>>
>>
>>-----Original Message-----
>>From: Dan Schwartz [mailto:[EMAIL PROTECTED]]
>>Sent: Monday, July 15, 2002 9:10 PM
>>To: MS-Exchange Admin Issues
>>Subject: RE: Exchange 5.5 server HACKED!
>>
>>
>>
>>      The server is not in production yet: There should be NO SMTP
>traffic on it.
>>
>>      [The business owner is returning from vacation tomorrow
>(Tuesday), and that's when I roll out the Outlook clients.]
>
>       [Balance cut]
>

>
>


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

Reply via email to