exchange 2003 open relay

[watts3000]

How do you guys test to see if theres an open relay. One of our clients was listed ordb.org. So I closed the relay but I just want to know of some test I can run to make sure its closed.

 

[AFB]

Try to send mail through it.

 

[watts3000]

How do I send mail through a relay.

 

[calbars]

From a machine external to your network, open a command shell and type:

>telnet yourserveraddress 25


you'll see a prompt, type

>EHLO yourstationname

server details ensue, then type

>MAIL FROM: iamspamming@hotmail.com

server acknowledges, then type

>RCPT TO: bill@microsoft.com

if your machine is properly configured, you should see an error message .

If you see a prompt to process to the DATA phase, you're in trouble!

type QUIT to exit the session

 

[watts3000]

In the your station name is that a computer name on the lan

 

[calbars]

the stationname is just the dns name or the ip address of the workstation your doing the test from.

In fact, with most mail servers you can use anything in the EHLO line, as in "EHLO rubbish.rubbish.com". But some mail system administrators are checking the validity of what you pass in the EHLO line to decide if they will either allow a connection or mark it suspicious, spam-wise.

 

[kstornado]

You can try using this too...

http://www.abuse.net/relay.html

Test six is kind of misleading though, it's an inherent flaw in SMTP...meaning if you pass the first five tests you should be ok.