SMTP Server Remote Queue Length Alert on EBCSBSSERVER

Hi,

I think but am not positive that this server is being used as an open relay.
My reason for feeling this way is that in the queue I have between 45 - 105
queues held every day. I migrated the mail using the ADMT tool from an old
SBS2000 box and find it ironic that in the first few minutes that the system
was up and running that I experienced these problems.

What should I do to evaluate the problem? Most of the messages that I have
checked are not a valid website.
"Alert on EBCSBSSERVER at 4/28/2005 8:12:51 PM

A large number of messages are pending in the e-mail server send queue.

Verify that you have Internet connectivity. If you can view Web sites
normally, contact your Internet service provider (ISP) to determine if there
is a problem with their e-mail server.

You can disable this alert or change its threshold by using the Change Alert
Notifications task in the Server Management Monitoring and Reporting
taskpad."

Thanks,

Chris

 

Make sure that the "Allow users who can Authenticate to relay" is turned
off. Otherwise it is easy to guess a users password and relay spam. I have
seen this on several sites. Strong passwords would also stop this, but is
often very difficult to enforce.

Mal Osborne
MCSE MVP Mensa

 

To ck for open relay see KB324958 If the outbound messages are mostly from
postmaster ck KB886208 If using POP connector ck the POP3 Patches and if
using TrendMicro ck the Trend POP3 patch

 

Hello Chris

Chris you may very well be a victim of a spam attack. The configure
Internet email and Internet connection wizard should configure your server
not to be an open relay. If you have confirmed you are not an open relay
follow the advice in the previous posts as well as disable temporarily
disabled sending out Non-Delivery reports in Exchange System manager
someone may be using NDR's to relay mail through the server.

I hope this helps

Doug Boyd


This post is provided as is with no warranties and confers no rights

 

Where is this setting? I could not find it but did find some of the other
points others had suggested.

Thank you!

 

Thank you - KB886208 appeared to be the trick.

 

Hello Chris

Open Exchange System Manager. Expand organization(top level). Then expand
the Global settings. Click on Internet Message Formats. In the right hand
pane you will see default. Right click default and choose properties.
Click the advanced tab uncheck the box at the bottom of the properties
sheet that is titled "Allow non-delievery reports" Click Apply. Click ok.
Then restart the SMTP service.

I hope this helps

Doug Boyd


This post is provided "AS IS" with no warranties and confers no rights