problem on my wingate server which is used as mail server

[Newbie]

im sort of new to this and i have never use wingate before and i have started a new job using this and it have already been set up for about 3/4 years ago i couldnt tell you what version im using but the problem is that it is being used as a mail server aswell and it keeps sending spam mail out to random e-mail address i have had my isp let me know im sending a large amount of emails out but when i check on one is sending mail out .. the server is linked to about 30 other pc is there any way of telling which computer is send the mail and stop it or just stop it all together sending mail (spam)

[adrien]

Hi

If you have been running that version for 3 /4 years, it's probably too old to have a WinGate mail server in it. You can check the version number by logging into WinGate with GateKeeper.

Then going to the help menu, about GateKeeper.

If you aren't running the Wingate mail server, what mail server software are you running on that machine? If it is acting as an open relay, it needs to be configured to deny relaying.

Adrien

[Newbie]

Hi Adrien

The server is running 6.0.3 at the moment but im in the middle of updating it as we speak so hopefully it will sort out the problem but if it dont how can i stop the server sending out random emails ? or at least where it is comming from.

as i said before i have never just wingate before so i dont know what im looking for or what to change

[adrien]

Hi

There are several things that may be happening.

1. You have a mail server which is an open relay (allowing spammers to send through it).

2. You have some other service open that is allowing spammers to spam through it (i.e. SOCKS service, WWW proxy or telnet proxy).

3. You have a virus on your LAN somewhere that is sending out lots of emails.

So, how to tell?

First thing is to look in your log files, or history in GateKeeper and see if you can see evidence of a lot of activity related to email.

Are you using the WinGate mail server for mail? This will normally be secure, but if any of the following is true, you may be relaying mail

i) if the external adapter is configured as internal (then external connections will be trusted).

ii) if untrusted senders are allowed to relay (on the receiving tab of the email configuration in WinGate).

Can you see any connections in GateKeeper?

Adrien