SBS 2003 Exchange is testing as an open relay according to spamhelp.org and instructions in TechNet Article 324958. In the TechNet Article it lays out how to close the open relay. All our server settings met the articles settings in the first place. We are not using the built in firewall (ISA server) as we are using an separate appliance (CheckPoint). We are also routing to Trend Micro for initial spam filtering via MX record.
We have checked application logs for authentication records as the TechNet article suggests but non are to be found. We have re-set all domain passwords and shut off all client machines for a period of time. The spams keep populating our SMTP queue.
Frustration is now setting in as we are configured as we should be yet we are still an open relay. Thanks for your help.
Software/Hardware used: Small Business Server 2003