Outside Users trying to access SMTP Service -- iis smtp nntp

iis smtp nntp : Outside Users trying to access SMTP Service

Harjinder Singh
8/16/2004 3:18:40 PM

We currently have our SMTP Service set to only relay for qualified IP
Address (localhost 127.0.0.1) and another machine on the internal network.
However after reviewing the SMTP Logs, it appears that other computers from
the internet are attempting to use the SMTP Server to relay messages. I
got the following entry from our log:

2004-08-11 07:36:56 222.101.168.32 - SMTPSVC1 COMPUTERNAME IPADDRESS 0
xxxx - +po07 500 0 32 9 0 SMTP - - - -
2004-08-11 07:36:59 222.101.168.32 po07 SMTPSVC1 COMPUTERNAME IPADDRESS 0
HELO - +po07 250 0 60 9 2250 SMTP - - - -
2004-08-11 07:36:59 222.101.168.32 po07 SMTPSVC1 COMPUTERNAME IPADDRESS 0
MAIL - +from:<china9988@21cn.com> 250 0 43 30 16 SMTP - - - -
2004-08-11 07:36:59 222.101.168.32 po07 SMTPSVC1 COMPUTERNAME IPADDRESS 0
RCPT - +to:<china9988@21cn.com> 550 0 50 28 0 SMTP - - - -
2004-08-11 07:36:59 222.101.168.32 po07 SMTPSVC1 COMPUTERNAME IPADDRESS 0
QUIT - po07 240 3281 80 4 0 SMTP - - - -

COMPUTERNAME AND IPADDRESS have been substituted to protest our servers name
and ip address....

I'm assuming the log entry is just an attempt to relay and that the message
was not sent out...can anyone confirm that?

Thanks

Kristofer Gafvert
8/17/2004 10:47:34 AM

Hello,

I would recommend you to block the port if you do not need to have it open
(you said that only internal machines are allowed to relay, which means that
you can block the port for connections coming from Internet, unless the SMTP
server accepts emails). That will give you maximum security.

But as Ken said, they have not successfully used your SMTP server to send
emails.

--
Regards,
Kristofer Gafvert
http://www.ilopia.com

[quoted text, click to view]

Ken Schaefer
8/17/2004 11:58:25 AM

I think you are OK

[quoted text, click to view]

status 550 is "requested action not taken". As soon as the SMTP server works
out that the address is not local, it generates an error status.

Cheers
Ken

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis smtp nntp

home · blog · groups

Questions? Comments? Contact the dn