Open SMTP Relay=BAD
If you upgraded your Exchange 5.5
server or if someone changed the default Exchange 2000 settings, your
server may be an open relay. What this means is that your server could
be used to send messages for spam purposes. This is also bad for a
number of other reasons including the embarrassment when your server is
used to send unsolicited SPAM mail for diplomas or "Hot Asian Babes".
Also, this added traffic could cripple your server or your network and
cause your company email to bounce or sit in queues for days. On top of
that, there are services on the Internet that detect and report open
relays. Some companies use these blacklists to ban mail from certain
domains. If your server is detected to be an open relay, you may find
yourself unable to send mail to certain domains. Some of these services
detect that Exchange is an open relay even though it may be closed. Here
is an article that describes that more:
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q304897
By default, Exchange 2000 required
authentication in order to relay. If you have a requirement to use
Exchange 2000 as a relay server, we recommend that you read this article
for specific instructions on how to make sure it is secure:
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q293800
Summary
You can take steps
now to make your Exchange environment more secure. You are far
better off doing these things now than later. |