I've just discovered that someone is relaying emails thru my IIS.
its only just happened, how can i prevent this??
i am firewalled.
for the moment i have turned off iis and smtp, till i can secure it.

help please

Um. I take it you're software firewalled? A hardware firewall shouldn't be set as such to allow anonymous access through the router to your server and out. Do you intend on making your server public?

Aegis Kleais
New Media Web Developer
(DWMX : IIS5.1 : SQL2K : WXP : ASP[VB/JS])

yes, software firewall, both built in xp one and norton peronal

server will not be public, its just for local testing, but needs to access smtp for jmail.

think i sorted it, i had to reinstall modem and for a few moments the firewall wasnt operational, they must have sneaked in then.
will turn iis back on later and see what happens.

Greetings Davecl:
I'm not sure how you're restricting your SMTP services, but you should get the properties of your SMTP services through IIS manager and set the restrictions to only allow your local hosts computers to use the SMTP relay.

hi guano
think ive done that now, but just in case can you tell me how??
ive also turned off virtual smtp server, it still sends me my mails from jmail tho when testing so thats ok

Davecl:

The way I do it is to open Internet Information Manager. Right-click on the SMTP Virtual Server and select Properties. The in the Access Tab, there is the Relay Restrictions button. Then you should just put in your localhost computer or your other computers on your LAN to allow only those to be able to relay the mail.
However, if you've stopped the SMTP Virtual Server, than you shouldn't have any one relaying mail through your system, unless possibly your Port 25 is open somewhere. I don't anything about jmail, so that might be what is leaving port 25 open if your SMTP Virtual Server service is stopped.

thanks guano, that's what i did , but like i say, ive stopped smtp services anyway.
reason jmail still works is that it is using my normal smtp from my isp and not my iis smtp service.

Dave

<BLOCKQUOTE id=quote><font size=1 face="Verdana, Arial, Helvetica" id=quote>quote:<hr height=1 noshade id=quote>
Davecl:

The way I do it is to open Internet Information Manager. Right-click on the SMTP Virtual Server and select Properties. The in the Access Tab, there is the Relay Restrictions button. Then you should just put in your localhost computer or your other computers on your LAN to allow only those to be able to relay the mail.
However, if you've stopped the SMTP Virtual Server, than you shouldn't have any one relaying mail through your system, unless possibly your Port 25 is open somewhere. I don't anything about jmail, so that might be what is leaving port 25 open if your SMTP Virtual Server service is stopped.
<hr height=1 noshade id=quote></BLOCKQUOTE id=quote></font id=quote><font face="Verdana, Arial, Helvetica" size=2 id=quote>