[Dshield] Exchange Open Relay
haled at pionet.net
Thu Feb 23 12:08:51 GMT 2006
Arthur - I believe you maybe. I am not sure what you used to find check,
but I recommend www.dnsstuff.com. They have a place to check to see if an
IP shows up in the spam databases.
I am not sure what you are using. Is it MS Exchange? If it is there are
some good resources for securing your Exchange server.
These are just a few. There are many more at MS web site:
Hope this helps. Deb
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org]
On Behalf Of Arthur Neville
Sent: Wednesday, February 22, 2006 1:53 PM
To: list at lists.dshield.org
Subject: [Dshield] Exchange Open Relay
I posted before about how my domain is being whacked by Spam and how some
users are contsantly getting hammered
I checked our public facing email server to see if its an Open Relay....
I was able to telnet into 25 and send mail from the outside hmmmmm
We use an intranet and within that intranet there is windows integrated
authenticated, we are using Outlook Web Access and Outlook Mobile Access for
I heard one of the WinAdmins speak about needing SMTP to communicate
between the servers and that there are no open relay's.... duhhhh guess what
I went to one of the sites that checks the site to see if it is on any
DNSBNL's and voila we are on about 50 dnsbl's on the net.....
Does that mean we have someone using our server as an open relay ???
Or we have someone who has some bots on his box or boxes....
In any event....thats the scoopla, I am well versed in the art of reading
so if you have some links or info that would be helpful that would be kewl
Brings words and photos together (easily) with PhotoMail - it's free and
works with Yahoo! Mail.
Learn about Intrusion Detection in Depth from the comfort of your own couch:
send all posts to list at lists.dshield.org To change your subscription options
(or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
More information about the list