HELO/EHLO Commands??

[wannaBgeeksquad]

apparently i have made it on a couple of blacklists (CBL, SBL-XBL, SPAMCOP, SPAMHAUS-XBL, AND WPBL). when looking at some of the details of my being reported it said some of the options are open relay, virus or trojan infection, or improperly configured mail server. i think its definitely something to do with the helo commands b/c i have these msexchange transport errors and they mention the helo commands in my error logs...

Any suggestions on what to do would be GREATLY appreciated.

Thank you

 

[Zelandakh]

I would doubt it is your command set that is the problem. Suggest you try contacting the companies and find why they blocked you. You may well be an open relay - check that at the same time.

 

[58sniper]

I have to second Zel's thoughts. Messing with ehlo responses isn't likely going to fix the problem. That certainly won't resolve "open relay, virus or trojan infection" issues. And, unless you mangled the ehlo config previously, you're not going to get off of RBLs by noodling with it now.

Make sure you have an rDNS entry.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[wannaBgeeksquad]

Well see, i learned the hard way with open relays, so as far as i can tell my i have set those relay settings properly. My mail ques in S.M. look normal so im not spitting out tons of mail like before. and my anti virus didnt pick up anything abnormal ie trojans or viruses etc. Soooo, that kinda leaves me at a loss for things to look for...???

Oh and my rDNS is fine also..

Thanks.

 

[FloDiggs]

Sometimes the easiest way to get off an RBL to change your IP. Do you have multiple IPs from your ISP? You can also use the Spam Database Lookup too at DNSStuff.org to see what lists you are on, and find out what you need to do to get off of them.

 

[FloDiggs]

Sorry, it is dnsstuff.com, not .org

 

[blakey2]

Hi,

Ensure you have a f/w which blocks all internal machines (Except mailserver) from sending out SMTP traffic (Block port 25).

If you have a virus infected machine it is probably pumping out tons of email causing you to get blacklisted.

Cheers.

 

[wannaBgeeksquad]

Blakey,

What is a F/W and how do i implement this? it seems to be a good security precaution either way.

Thanks.

 

[58sniper]

F/W = firewall.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[wannaBgeeksquad]

haha. Duuh, what the hell am i thinking.