Page 1 of 3 123 LastLast
Results 1 to 10 of 23

Thread: spam mail from my server !!?

  1. April 2nd, 2002, 05:25 PM #1
    bimmer
    bimmer is offline
    Senior Member
    Join Date
    Jan 2002
    Posts
    458

    Question spam mail from my server !!?

    my ISP called me asking about lots of spam emails comming out from my server.
    it seems it's a virus , i'm not sure,

    i'm using MS Exchange server 5.5

    any one have any idea what to do ?
    When the power of Love overcomes the Love of power, the world will know peace... Jimi Hendrix
    -------------------------------------------------------------
    I dream of giving birth to a child who will ask...... what was war?
    Reply With Quote Reply With Quote
  2. April 2nd, 2002, 05:34 PM #2
    DjM
    DjM is offline
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    If you have SMTP relaying turned on, turn it off.

    DjM
    DjM
    Reply With Quote Reply With Quote
  3. April 2nd, 2002, 05:50 PM #3
    Dr Toker
    Dr Toker is offline
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    Do you have a <FORM> command on your webpage?
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2
    Reply With Quote Reply With Quote
  4. April 3rd, 2002, 02:09 AM #4
    bowlfreak
    bowlfreak is offline
    Member
    Join Date
    Mar 2002
    Posts
    67
    Two things to do...turn off SMTP relaying (if you can). Run a virus scanner on the email server to see if you have been "infected."

    HTH
    \"No matter where you go,
    there you are.\"
    Reply With Quote Reply With Quote
  6. April 3rd, 2002, 02:31 AM #5
    RiOtEr
    RiOtEr is offline
    Banned
    Join Date
    Sep 2001
    Posts
    852
    http://www.abuse.net/relay.html run your server through that that will let you know if its on or not
    RiOtEr
    Reply With Quote Reply With Quote
  7. April 3rd, 2002, 03:17 PM #6
    bimmer
    bimmer is offline
    Senior Member
    Join Date
    Jan 2002
    Posts
    458
    ok guys ... i can't turn off the SMTP coz' the mail goes through it ...
    the server act as in-comming and out-going mail server ... and it's just a mail server not web based mail system.

    so how can i deny SMTP mail relaying from outside my LAN.
    and by the way ... anti virus didn't help .
    When the power of Love overcomes the Love of power, the world will know peace... Jimi Hendrix
    -------------------------------------------------------------
    I dream of giving birth to a child who will ask...... what was war?
    Reply With Quote Reply With Quote
  8. April 3rd, 2002, 03:34 PM #7
    Dr Toker
    Dr Toker is offline
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    Bimmer, You should get a firewall. Have it filter all out going data packets port 25(SMTP).
    Specify that you only want outbound traffic on your smtp coming from your lan.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2
    Reply With Quote Reply With Quote
  9. April 3rd, 2002, 03:47 PM #8
    bimmer
    bimmer is offline
    Senior Member
    Join Date
    Jan 2002
    Posts
    458
    isn't there any other solution than the firewall .
    When the power of Love overcomes the Love of power, the world will know peace... Jimi Hendrix
    -------------------------------------------------------------
    I dream of giving birth to a child who will ask...... what was war?
    Reply With Quote Reply With Quote
  11. April 3rd, 2002, 03:55 PM #9
    Dr Toker
    Dr Toker is offline
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    I asked a few co-workers about this and they could offer any other FOR SURE solution. The Best way would be a software firewall. Configure it filter 25,and set the rule. Other than that theorectically, I think you could download a Administration tool from any Networking site. I'm sure somone has made a program doing what you need.

    I am interested in how your being exploited. Do you have a website? If that has a mail server on it. And you use your mail server to submit <FORM> in HTML you could be exploited in more ways than one.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2
    Reply With Quote Reply With Quote
  12. April 3rd, 2002, 03:56 PM #10
    DjM
    DjM is offline
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    Are you using "Send Mail" as you SMTP Engine? If not, what are you using?


    DjM
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules