Open Relay Report: Microsoft Exchange

An SMTP open relay is a mail server that permits an unknown, outside sender to pass mail through the server to unknown, outside recipients, usually without the consent of its manager. This gives professional spammers a ready delivery mechanism for dumping unsolicited commercial email (UCE) on undeserving end-users while avoiding detection. It's easy to see why spammers favor open relays. They can abuse other people's bandwidth and mail servers, without getting blocked, blacklisted, or suffering negative publicity. More information about Microsoft Exchange.

Version	Source	Open Relay Details
	trimMail's Email Battles	How To Un-Whack An Exchange Server
2000, 2003	Microsoft	How to troubleshoot mail relay issues in Exchange Server 2003 and in Exchange 2000 Server
5.0, 5.5+	SANS	Third Party Mail Relay (Open Relay) and Microsoft Exchange Server
5.0, 5.5, 2000	Microsoft	SMTP relay behavior in Windows 2000, Windows XP, and Exchange Server
5.5	spamlinks	Microsoft Windows 2000 and Exchange 5.5 SMTP service unauthorized mail privileges
5.5	spamlinks	Microsoft Windows SMTP Service fails to properly handle responses from the NTLM authentication layer
5.5	Mike Abbaticchio	How to remedy Exchange 5.5 IMS default open relay behavior
5.5	spamlinks	Microsoft Windows SMTP Service Authorization Bypass Vulnerability
5.5	spamlinks	CVE-1999-0682
5.5	spamlinks	Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service
5.5	spamlinks	Exchange server encapsulated addresses could allow third-party relaying
5.5	spamlinks	NT Exchange Server Encapsulated SMTP Address Vulnerability
5.5	spamlinks	Antirelay configuration in Microsoft Exchange Server 5.5
5.5	spamlinks	CVE-2002-0054
5.5	spamlinks	"Encapsulated SMTP Address" Vulnerability
5.5 SP1+	spamlinks	Restricting Routing in the Internet Mail Service
5.5 SP1+	spamlinks	How to Prevent Mail Relay in Exchange Server 5.5 SP1 or Later
5.5 SP2	spamlinks	Is Your Exchange Server Relay-Secure?
5.5, 2000	CNET news.com	Mail Server Flaw Opens Exchange to Spam
5.5, 2000	NetworkWorld	Problems With Open Relay and Exchange
5.5, 2000	Neophasis	Does In-Place Upgrade of Microsoft Exchange Create Open Relays?
5.5, 2000	spamlinks	To prevent SMTP relaying with Microsoft Exchange Server
5.5, 2000, 2003	spamlinks	Guest Account Allows Relaying Regardless of Routing Restrictions
6.0	spamlinks	Antirelay configuration in Microsoft Exchange Server 6.0
All	spamlinks	SMTP AUTH relay attacks
All	MAPS	Microsoft Exchange
SBS 2000, SBS 2003	Microsoft	How to block open SMTP relaying and clean up Exchange Server SMTP queues in Windows Small Business Server
All	eMediaWire	Are Email Vendors Losing the Open Relay Battle?
All	Google	Search: "Microsoft Exchange" AND "open relay"
All	Google Groups	Search: "Microsoft Exchange" AND "open relay"

trimMail Inbox is no longer manufactured. Refurbished trimMail products
are distributed by Comco, Inc. and its channel partners.

Call 800-432-8638/563-355-1212.