Mail Server is Relaying/Spamming

[middi1]

Well I have a fairly new Exchange 2000(1 month) install. All of a sudden in ths last week I have noticed my disk space getting smaller. After further investigation my Bad mail folder and the Queue folder are both filling with messages. If I look at some of the messages in the bad and que they are the famous spams(Viagra and all them nice emails). They are coming in from my SMTP Virtual Server. I looked in the properties and have no computers allowed to relay. The check box is checked that allows computers to relay who successfully authenticate. I have all 3 boxes checked in the authentication tab(Everything that was defaulted). I have tried unchecking the Anonymous access but then I start getting no emails. I have started putting IP addresses in my connection to reject IP addresses that I have noticed are relaying but I know you can't keep up with that plus that is a small bandaid fix. I am at a loss of why they are able to relay. I have checked my server via relay tests and the tests keep coming back that my mail server is not a relay server. Any help or pointers would be appreciated.

 

[malkav666]

ckeck your smtp virt server properties under the access tab >>relay settings. Make sure that the only the list below is checked and that allow all users who suucessfully authenticate is checked.
If it is already configures that way then turn on auditing and find out which account is being used to send the offending emails...and change the password or disable it.


BTW is your guest account enabled? That and administrator are the two most common ones used and should have realy strong passwords..or you could just rename them.

Hope you get it fixed.