?
Solved

Exchange 2000 - Blacklisted and SMTP queues piling up

Posted on 2004-08-23
3
Medium Priority
?
368 Views
Last Modified: 2006-11-17
My domain has two Exchange server in two different locations

I have turned off open relaying on both and Access Authentication has been checked

I am not sure why but my SMTP queues are piling up and my Exchange server is slowing down.

Help.

Steve

Note: Windows 2000 Server, Exchange 2000 SP4
0
Comment
Question by:Dutchesc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 2000 total points
ID: 11872062
Probably an NDR attack. This is where messages are sent to your server with a non valid email address on purpose and your machine bounces them back as NDRs. The From line has been spoofed to be the real recipient of the message.
Disable NDRs in ESM which will stop more messages flowing out.

If it isn't that then it could be an authenticated SMTP relay. This is where a password on your system has been guessed and you are allowing SMTP traffic through. Do you have any one collecting email through Outlook Express and then sending through your server? If not, disable this feature as it isn't required.

Then take a look at this article from Microsoft on how to clean up: http://support.microsoft.com/default.aspx?kbid=324958

Simon.
0
 

Author Comment

by:Dutchesc
ID: 11872407
As far as the NDR attack is concerned the email addresses are not being spoofed to be real sent froms. So could this still be a possiblity?

I do not believe that anyone is collecting email through OE.

Finally We are not using SBS, is there anyway to clean the queues within Exchange Server 2000?

Thanks,
Steve
0
 
LVL 104

Expert Comment

by:Sembee
ID: 11872432
I should have said ignore the SBS reference as it is the same technology - SBS uses Exchange. I don't think there is a version of the article just for Exchange.

Simon.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question