I believe you need to disable the "Resolve Anonymous E-Mail" setting on the SMTP VS of the Exchange 2003 BH server
To do so, follow these steps: 1. Click Start, click Programs, point to Microsoft Exchange, and then click System Manager. 2. In System Manager, expand Servers, and then expand the target server. 3. Expand Protocols, and then expand SMTP. 4. Right-click the SMTP virtual server, and then click Properties. 5. In the Properties dialog box, click the Access tab, click Authentication, and then click to clear the Resolve anonymous E-mail check box. Note Microsoft does not recommend that you turn on the Resolve anonymous E-mail option on any Exchange computers that receive mail from the Internet. If you turn on the Resolve anonymous senders option, any user can send anonymous mail through the SMTP server, and the mail message appears to the recipient as authenticated mail. From: Eric Woodford [mailto:[email protected]] Sent: Friday, April 03, 2009 12:27 PM To: MS-Exchange Admin Issues Subject: DL with "From Authenticated Users Only" checked, allowing email from Internet We are having issues with spam going to open distribution lists. Security is working to clamp down on all these lists to stop the flood of spam. From my experience, the "From Authenticated Users Only" checkbox is supposed to only allow messages from AD authenticated users. Unfortunately, from my testing, it is passing email from gmail and yahoo accounts. I have triple checked, and I don't have a contact for any of my external test accounts in the GAL. Mail route =Internet -> Trend IMSS -> Exchange 2003 BH -> Exchange 2007 HT -> Exchange 2007 CCR Has anyone seen this before? Are we missing a setting? Is working as designed? Thanks, This communication is confidential and may be legally privileged. If you are not the intended recipient, (i) please do not read or disclose to others, (ii) please notify the sender by reply mail, and (iii) please delete this communication from your system. Failure to follow this process may be unlawful. Thank you for your cooperation. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
