Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is a best practice method for minimising spam issues when spammers are getting through our ISA 2004 gateway and spamming from our exchange server?

Is there a fantastic document that someone knows about for setting up exchange server 2003.

share|improve this question
They're spamming your internal users? Or they're sending spam outbound from your Exchange server? – squillman Sep 1 '09 at 23:25
Agreed. Where are spammers coming from, and who are they sending spam to? – Massimo Sep 1 '09 at 23:27
They are sending spam outbound from our Exchange server. It's causing our domain to get put on blacklists. – The Woo Sep 1 '09 at 23:43
Do you have relaying disabled? – squillman Sep 1 '09 at 23:58
Ok, but where do they connect from? The Internet? Or do you have spammers on your internal network (maybe infected computers)? – Massimo Sep 2 '09 at 0:12
up vote 2 down vote accepted

You need to restrict relaying through your server - In ESM, expand Administrative Groups > Admin Group Name > Servers > Servername > Protocols > SMTP. Right-click on "Default SMTP Virtual Server" and go to properties. Click the "Access" tab and click the "Relay..." button. It should hopefully be set to "Only the list below" and only have known IP addresses or subnets that YOU have control of. If it is set to "All except the list below" and there are no entries in the list, you have an open relay. If there are entries for networks that YOU do not control, you should probably look into removing them from this list. No fantastic document, but that is basically it. Well here is a good article at least -

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.