Email Server Blacklisted

[kryptor]

Hello all.

I have recently had my exchange 2003 server blacklisted on around 12 lists. The reasons that they seem to supply for blacklisting is OPEN RELAY/PROXY.

I have run several security checks over the mail server and there appears to be no relaying setup, and there are no viruses/spyware on my network as I am constantly scanning it.

I have applied to the lists to be removed and am awaiting responses from some of them as they are automated and take around 7 days.

What I am hoping for is if someone could point me in the direction of a good Exchange Server setup guide/checklist?

Here's Hoping.

Dave

If @ 1st U don't suceed then I guess your not a bird

 

[ntinlin]

Microsoft's Exchange Best Practices Analyzer Tool is your best place to start.

Neill

 

[customgt]

http://www.microsoft.com/downloads/...1F-4BEE-4943-AC22-E2DDBD258DF3&displaylang=en

Hmm ill have to try that

 

[customgt]

System Manager/Servers/Featherserver/Protocols/SMTP/Default SMTP Virtual Server

Access Tab/Relay button


BTW make sure you check that out. I had a problem with Open Relay and I saved the above in my notes.

 

[markdmac]

Lock down all outgoing PORT 25 traffic to only come from the server. You may have a client machine with its own SMTP engine.

On the virtual SMTP Server, remove the check box to allow all machines that successfully validate to be able to relay.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[lowrad]

Lock down the SMTP Virtual Server otherwise you're gonna get blacklisted again if your VS is known for being a relay for spam.

 

[kryptor]

Thanks all for the help, I will run the Analyzer Tool and see what that reports.

I have performed a full network vira;l/spyware scan and there are no rogue applications/malware etc running on any of the clients.

I have now double checked the RELAY options and the guy who initially setup the mail server left a tick in there - so now its GONE

Hopefully this will stop anymore issues, and I have managed to get some of the DNSBL to remove us instantly, just awaiting status on the rest now - so fingers crossed.

If @ 1st U don't suceed then I guess your not a bird