Hi, I run server 2003 R2 Standard edition as a web server and mail server. I'm having a problem with SMTP security, as soon as I enable smtp service, spammers are using my ip address to send out mass emails. I used the option to only relay messages that have been authenticated, also I tried turning off relaying, but they still are sending through my mail server.I've had to disable smtp service so that they can't do this. How can I tighten this down so that only the users that authenticate via a windows username/password in accounts can send mail? Any help is appreciated.

Hi acdc1982,

The best and easiest way to tighten mail security is to get some anti-spam software.

Yeah, I need to look into that as well, but is there anyway to prevent them from sending through me at all, I don't want them using my bandwidth up trying to send all that spam.

Well they shouldn't actually be touching your server...

are you using Exchange, or just the email capabilities of 2k3?

Just the mail server abilities of server 2k3. I created a mail server role, and added my mailboxes, then I setup smtp service and required authentication by checking the username/password that is in the users list. I have avast server edition running on my machine, and the mail scanner is constantly scanning mail from various ip address who are sending through me.

first what mail software do you use and what do you use it for i.e. sendening and reciveing emails or just as relay when i know all this i might be able to help you.

on the subject of anti-spam software i surgest you use spamassassin this is a free software to download and use you can get it from SpamAssassin: Welcome to SpamAssassin and to help you install it on a windows system i use this website How To Use SpamAssassin on Win32 it's very good but you will need quit a powerfull server. (the hosting company i work for uses this so i know it's very good when properly configerd, if you need help i can help you out on that one as i was the one how installed it at work) it can be installed over remote desktop if the server is in a data center.