Thousands of copies of same email in exchange 2003 queue

Hi,

Windows SBS Server 2003 with exchange......

I received two emails today from a known email address, I did not reply to either email. No virus was deteted.

Email delivery and receiving was since very slow so I checked the message tracking center facility of Server Management progrem. There were more than 1000 emails within the last 24 hours - normally send approx 50. I then had a look at the queue's - there where approx 18,000 emails waiting - all from this email address that I received an email from earlier and postmaster@mydomain.

The report that my server has given me is

  SMTP Server Remote Queue Length 26/08/2004 17:26 1
A large number of messages are pending in the e-mail server send queue.

Verify that you have Internet connectivity. If you can view Web sites normally, contact your Internet service provider (ISP) to determine if there is a problem with their e-mail server.

You can disable this alert or change its threshold by using the Change Alert Notifications task in the Server Management Monitoring and Reporting taskpad.

Any ideas would be gratefully apprechiated.

Cheers

Clive
YoungJediAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
ColinRoydsCommented:
You may have a virus, or being used as an open relay for spamming, check that all relaying is disabled, and that the server is clean of viruses and delete the mail in the que and check if it starts growing again.
this article may help http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_20916308.html
0
 
BNettles73Commented:
You can go to http://www.dnsreport.com/ and check your mail relay ... you can also use http://www.dnsstuff.com.

If all of the emails are outbound you either have a virus, open relay issue or the server could have been hacked.

If you don't trust your AV software you can scan the OS with housecall www.trendmicro.com ... You may also check your Exchange AV software to make sure it is scanning the database.

Have you used queue viewer to check out the emails ... are they all from the same person ... what kind of subject matter? Are you sure one of your users isn't spamming or you don't have a looping message ... You may be able to delete with no NDR and see if the issue clears up.

Definitely check the relay to make sure it is closed.
How To Block Open SMTP Relaying and Clean Up Exchange Server SMTP Queues on SBS
http://support.microsoft.com/default.aspx?scid=kb;en-us;324958
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
SembeeCommented:
postmaster@ are NDRs - so you might be under an NDR attack.
The other one might be a massive BCC email that triggered when you opened the message.

KBID 324958 is an excellent place to start. Ignore the SBS references.

Simon.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.