Mail Protection: SMTP, POP3, Antispam and Antivirus How to find authenticated users sending mails?

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 2 subscribers
Views 5858 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to find authenticated users sending mails?

DotcomDcom over 9 years ago

Someone is sending spam mail with my utm.
Relaying is only allowed from internal network or from authenticated users from my active directory.

So the spam sender must using the credentials from one user, but i don't know how to find out which user this is.

Please help.

This thread was automatically locked due to age.

0 BAlfson over 9 years ago

Hi, and welcome to the UTM Community!

I don't recommend allowing authenticated relay from the outside. Where is your mail server and what software is it running?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 DotcomDcom over 9 years ago in reply to BAlfson

Hi Bob,

My mail server (Exchange Server 2013) is in my internal network. I configured at host-based relay only "Internat Network" and at "Authenticated Relay" my Active Directory Users.

Cheers - Ronny
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to DotcomDcom

I would have only the Exchange server in 'Host-based Relay' and have all users authenticate on the Exchange server instead of the SMTP Proxy. See Exchange with SMTP Proxy.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel