Solved

Strange messages in out queue

Posted on 2004-04-22
5
221 Views
Last Modified: 2012-08-13
I have an Exchange Server 5.5 that gathers about 100 or so strange messages in the Outbound Awaiting Delivery queue every day in a slow trickle.

They look like spam or virus related things - they will have no originator and the destination is always some sort of loopy bs address like aaa5.8m.com, groogle.com, or the like.  They fail with a [network error during host resolution] message and just build up out there in the queue.  I have been purging them manually, but am concerned about their source.

We are not open relaying - everything requires authentication and I've been through the process of covering relay holes.  We WERE at one time open relaying and were being used for spam for about a month before I found it, several years ago.  I am also pretty confident that no one is purposefully using a mass mailer inside the building.  We are well antivirused, so I don't think someone is hosting a trojan innocently.

Can anyone help me identify the source of these messages and determine how to fix the root problem behind it?
0
Comment
Question by:breid7718
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 15

Expert Comment

by:getzjd
ID: 10890467
These are probably NDR's that spammers are using to send email now.  Turn off NDR's or you will have to use a 3rd party software solution.  Only exchange 2003 has the ability to filter out these emails automatically.  http://www.cmsconnect.com/  or I believe GFI mail essentials will help out also.

Read this to understand a reverse NDR attack http://www.cmsconnect.com/Praetor/RNDR/prRNDR.htm
0
 
LVL 1

Author Comment

by:breid7718
ID: 10891017
I can find Administratior notifications for NDRs (and have them turned off) on the IMS property page, but I don't see an option to actually turn off NDRs.  Where can I find that option?
0
 
LVL 15

Accepted Solution

by:
getzjd earned 500 total points
ID: 10891237
I was slightly off in saying to disable ndr's in exchange 5.5.  Sorry about that.. I have all my clients on 2k and 2k3 now so I didnt even think about it.

 This can only be done in 2000 and up.   Check out this thread http://www.tek-tips.com/gpviewthread.cfm/qid/655444/pid/10/lev2/3/lev3/15

There hare many suggestions in there.  Some of the filtering software can be found fairly cheap as well.  You may want to check those out.
0

Featured Post

Salesforce Has Never Been Easier

Improve and reinforce salesforce training & adoption using WalkMe's digital adoption platform. Start saving on costly employee training by creating fast intuitive Walk-Thrus for Salesforce. Claim your Free Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question