Exchange 2000 Server listed as a open relay with Mail-Abuse.

[Mikec@networkingtec.com]

I have a client who is running Exchange 2000 Mail-Abuse has them listed has a
relay. I have checked there SMTP configs over and over and they are locked
down. They only 4 of the test Listed below. I think these tests are using
some called Quoted routing spoffing. But I haven't been able to find a fix.
If anyone has anymore info let me know please. Thanks Mike C

:Relay test: #test 21

MAIL FROM:<unavailable@[12.166.246.5]
250 2.1.0 unavailable@[12.166.246.5]....Sender OK
RCPT TO:<"user2@zncfpngpure.org"
250 2.1.5 "user2@zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998359-40801@cygnus.mail-abuse.org> Queued mail

for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250

RSET
250 2.0.0 Resetting

:Relay test: #test 22

MAIL FROM:<unavailable@[12.166.246.5]
250 2.1.0 unavailable@[12.166.246.5]....Sender OK
RCPT TO:<"user2%zncfpngpure.org"
250 2.1.5 "user2%zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998360-40801@cygnus.mail-abuse.org> Queued mail

for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250

RSET
250 2.0.0 Resetting

:Relay test: #test 11

MAIL FROM:<unavailable@mail1.brightonbest.com
250 2.1.0 unavailable@mail1.brightonbest.com....Sender OK
RCPT TO:<"user2@zncfpngpure.org"
250 2.1.5 "user2@zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998363-40801@cygnus.mail-abuse.org> Queued mail

for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250

RSET
250 2.0.0 Resetting

:Relay test: #test 12

MAIL FROM:<unavailable@mail1.brightonbest.com
250 2.1.0 unavailable@mail1.brightonbest.com....Sender OK
RCPT TO:<"user2%zncfpngpure.org"
250 2.1.5 "user2%zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998363-40801@cygnus.mail-abuse.org> Queued mail

for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250

[Geoff Pearce]

I have tested here and cannot produce the same results. The email is
accepted but never relayed and the originator receives an NDR stating that
the user "user2@zncfpngpure.org"@brightonbest.com cannot be found. Do you
allow relay via authentication (Exchange System Manager | <your
organization> | Administrative Groups | <your administrative group> |
Servers | <your exchange server> | protocols | smtp | <your virtual server>
| Access Tab | Relay button | "Allow all computers which successfully
authenticate to relay regardless of the list above")? Also which
mail-abuse.com list are you specifically on because that may provide some
clues as to why you are listed (http://www.mail-abuse.com/lookup.html)?

Geoff Pearce
Nemx Software

"Mikec@networkingtec.com"
<Mikec@networkingtec.com@discussions.microsoft.com > wrote in message
news:2638BB7F-2F7F-4448-A334-51A41652C257@microsoft.com...

I have a client who is running Exchange 2000 Mail-Abuse has them listed
has a
relay. I have checked there SMTP configs over and over and they are locked
down. They only 4 of the test Listed below. I think these tests are using
some called Quoted routing spoffing. But I haven't been able to find a
fix.
If anyone has anymore info let me know please. Thanks Mike C

:Relay test: #test 21
MAIL FROM:<unavailable@[12.166.246.5]
250 2.1.0 unavailable@[12.166.246.5]....Sender OK
RCPT TO:<"user2@zncfpngpure.org"
250 2.1.5 "user2@zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998359-40801@cygnus.mail-abuse.org> Queued
mail
for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250
RSET
250 2.0.0 Resetting

:Relay test: #test 22
MAIL FROM:<unavailable@[12.166.246.5]
250 2.1.0 unavailable@[12.166.246.5]....Sender OK
RCPT TO:<"user2%zncfpngpure.org"
250 2.1.5 "user2%zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998360-40801@cygnus.mail-abuse.org> Queued
mail
for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250
RSET
250 2.0.0 Resetting

:Relay test: #test 11
MAIL FROM:<unavailable@mail1.brightonbest.com
250 2.1.0 unavailable@mail1.brightonbest.com....Sender OK
RCPT TO:<"user2@zncfpngpure.org"
250 2.1.5 "user2@zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998363-40801@cygnus.mail-abuse.org> Queued
mail
for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250
RSET
250 2.0.0 Resetting

:Relay test: #test 12
MAIL FROM:<unavailable@mail1.brightonbest.com
250 2.1.0 unavailable@mail1.brightonbest.com....Sender OK
RCPT TO:<"user2%zncfpngpure.org"
250 2.1.5 "user2%zncfpngpure.org"@brightonbest.com
DATA
354 Start mail input; end with <CRLF>.<CRLF
(message body)
250 2.6.0 <rlytest-1105998363-40801@cygnus.mail-abuse.org> Queued
mail
for delivery
/proj/maps/rss/bin/rly: relay accepted - final response code 250