IMF on Exchange 2003

[199002003]

Hi, all of the sudden, I see so many connectors in my exchange queues and I have got so many spams in my inbox too; can you tell me what is going on? Is imf service down? what can I do to get rip of the connectors and spams? how can I be sure the imf works sucessfully?

thanks,

 

[PScottC]

Sounds like you've accidently configured your server to be an open relay. A common error is to tick the "Allow messages to be relayed to these domains" checkbox on the Address Space tab of an SMTP connector.

If you find that you have an open relay, stop the SMTP service and dump all the files from the queue folder of the SMTP virtual server.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[199002003]

Thanks a lot, where is the setting actually located? can you point me to it plz?

Thanks,

 

[PScottC]

Here's how to test: [URL unfurl="true"]http://support.microsoft.com/kb/304897[/url]

In Exchange System Manage (ESM), open the connectors folder. For each connector, right-click on it and choose properties. On the Address Space tab, the checkbox is at the bottom. It should be unchecked.

The other place to check would be the SMTP virtual server. Expand Servers, expand your server, expand protocols, click on SMTP, right-click on Default SMTP virtual server and choose properties. On the Access Tab click on Relay... The relay restrictions should show "Only the list below" selected and the list should be empty. The "Allow computers which authenticate" should be checked.

Good Luck!

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[199002003]

On the Access Tab\Relay, on the select list is checked, Computers: I have both of my subnet IP there, The "Allow computers which authenticate" is checked. Anything else is incorrect?

 

[199002003]

Just to clarify, I had the settings set for a very long time and it was working fine, all of the sudden I have so many smtp connectors in my queue; could it be the SPF is not working on my hosting company site?

 

[PScottC]

Are the queues destined for your domain or others?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[199002003]

they are all destined to other domains,

EG:

Name: internet mail smtp connector (ex01) - nim.com
and so on

 

[PScottC]

Are you able to send mail to any external e-mail addreses? Have you tried sending mail to your personal account?


PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[199002003]

Yes, I can send out email fine; is there a way to find out whether my IMF got remove from the server or not? I tried to look at my add/ remove programs and dont' IMF there anymore?

 

[199002003]

Help, I am getting a lot of spams, it looks like my IMF2 is not in the system anymore, can I re-install it(run the setup again) again? Am I going to experience any issues or there is another alternative?

I try to verify the imf is there or not:

ESM\Global settings\message Delivery\Properties (IMF is no longer there anymore)

Many thanks,

 

[PScottC]

I don't use the IMF, so I'm not sure how to direct you at this point. If no one else responds you'll probably have to open a support case with MS.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[N0ktar]

I would install SMTP firewall ASP, try XWall, config is a breeze.

 

[199002003]

Thanks, I found out that I accidently unchecked "use IMF" on the Exchange server, after I applied the filter again, my queue does not getting any bigger at all. But How can I remove the unwanted connectors in the queue? do I need to remove it one by one? it seems too much time consuming.

Thanks,

 

[58sniper]

You can stop the services, and clear out the appropriate directory of all of the items, then restart the service. That's not recommended though, as that will clear legitimate mail as well.

Pat Richard, MCSE MCSA:Messaging CNA MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[199002003]

thanks everyone, I guess I will just let it time out, I don't want to clear any lefitimate mail.