Is there any way to stop our Exchange server from being hi-jacked by
someone sending spam? It is very low level... about 50/day. I clear
the queue regularly. I have applied sp4, locked down all the settings
I can find run Adware on the desktops and still they keep coming.

---

Request for Question Clarification by rmn-ga on 02 Dec 2003 08:29 PST

Have you implemented the following fixes on your system?  If not,
please try them and let me know if they solve your problem.  If they
do, I will reformat the links and post them as an answer.  If the
solutions have been tried and do not work, please let me know and I
will continue to research your problem:

You may want to check out the starred (**) fixes before you look at
the others, they sound like they are most likely the solutions to the
problems you are having.

**"Exchange 5.5 IMC Patch 2655.55"
http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=AADAD40A-9C24-44F1-BA64-8CC78C38CD79
The above link fixes vulnerabilities detected after the release of SP4
- you may want to try this first.

**"Guest Account Allows Relaying Regardless of Routing Restrictions"
http://support.microsoft.com/?kbid=251149

"XFOR: How to Help Secure the Internet Mail Service and Clean Up After
Unsolicited Commercial E-mail or Spam Abuse"
http://support.microsoft.com/?kbid=324059

"Is Your Exchange Server Relay-Secure?"
http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/7696/MicrosoftExchangeOutlook_7696.html

"XIMS: How to Stop Spam Mail Messages from Using IMS Relay Agent"
http://support.microsoft.com/?kbid=199656

"XFOR: Restricting Routing in the Internet Mail Service"
http://support.microsoft.com/?kbid=196626

"XCLN: Routing Restrictions Require SMTP Authentication"
http://support.microsoft.com/?kbid=197869

-rmn-ga