Re: Demon Email

["graham_howe" <graham@xxxxxxx>]

--- In ukha_d@y..., "Rob Mouser" <rmouser@t...> wrote:
> Hi 
> 
> This is a little 'wide' but I feel it is relevant to us HA people.
We
> have a Demon Web account here and was infact on the verge of 
setting one
> up for home (Fixed IP etc, ISDN, fixed cost etc.....However don't 
post
> on this as its not the subject!) HOWEVER we have just had external
email
> banned by Demons Abuse Team due to our MS Exchange Server v5.0 
(Part of
> SBS Ver4.0)beeing venerable to email spammers using relay. I've 
spoken
> to Demon and done some research and it appears that Exchange
Ver5.0
> cannot be protected against relay attacks! Only Ver5.5 has 
sufficient
> functionality to block relay use.
> 
> OK so we cannot upgrade to 5.5 (Various issues with compatibility 
with
> some bespoke software supplied by another company.) (Or in effect 
SBS
> v4.5) at this precise moment and so the only option is to add a 
firewall
> to the network (25 users) anyone got any recommendations that will
do
> the trick? As long as Demon can telnet in and get refused they will
open
> us back up.
> 
> Yours bemused and confused.........
> 
> Many Thanks
> Rob

This is very interesting as I have just had the exact same thing 
(though ADSL based) happen to a client of mine (I did their web site 
not their SBS install). Their solution was to move to another ISP, 
but I suspect that is only temporary as I'm sure that other ISPs will 
soon start to ban Exchange 5 too.

Anyway, in terms of a solution, are you using a router between your 
server and the net, if so then it should be possible to go in to the 
router set up and block the ports, or better still, if there is no 
need for any connection in to the network simply block all incoming 
traffic.

If you do not have a router then a hardware or software firewall will 
be required and that really depends upon your budget. I have no 
experience of this myself, but I know there are several on this list 
who can suggest a linux solution that has the advantage of being free 
if you have a spare machine to put it on.

Of course you really should upgrade to SBS2000, but then you knew 
that didn't you ;-)

Graham



For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.