YoungJedi
asked on
Thousands of copies of same email in exchange 2003 queue
Hi,
Windows SBS Server 2003 with exchange......
I received two emails today from a known email address, I did not reply to either email. No virus was deteted.
Email delivery and receiving was since very slow so I checked the message tracking center facility of Server Management progrem. There were more than 1000 emails within the last 24 hours - normally send approx 50. I then had a look at the queue's - there where approx 18,000 emails waiting - all from this email address that I received an email from earlier and postmaster@mydomain.
The report that my server has given me is
SMTP Server Remote Queue Length 26/08/2004 17:26 1
A large number of messages are pending in the e-mail server send queue.
Verify that you have Internet connectivity. If you can view Web sites normally, contact your Internet service provider (ISP) to determine if there is a problem with their e-mail server.
You can disable this alert or change its threshold by using the Change Alert Notifications task in the Server Management Monitoring and Reporting taskpad.
Any ideas would be gratefully apprechiated.
Cheers
Clive
Windows SBS Server 2003 with exchange......
I received two emails today from a known email address, I did not reply to either email. No virus was deteted.
Email delivery and receiving was since very slow so I checked the message tracking center facility of Server Management progrem. There were more than 1000 emails within the last 24 hours - normally send approx 50. I then had a look at the queue's - there where approx 18,000 emails waiting - all from this email address that I received an email from earlier and postmaster@mydomain.
The report that my server has given me is
SMTP Server Remote Queue Length 26/08/2004 17:26 1
A large number of messages are pending in the e-mail server send queue.
Verify that you have Internet connectivity. If you can view Web sites normally, contact your Internet service provider (ISP) to determine if there is a problem with their e-mail server.
You can disable this alert or change its threshold by using the Change Alert Notifications task in the Server Management Monitoring and Reporting taskpad.
Any ideas would be gratefully apprechiated.
Cheers
Clive
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
postmaster@ are NDRs - so you might be under an NDR attack.
The other one might be a massive BCC email that triggered when you opened the message.
KBID 324958 is an excellent place to start. Ignore the SBS references.
Simon.
The other one might be a massive BCC email that triggered when you opened the message.
KBID 324958 is an excellent place to start. Ignore the SBS references.
Simon.
this article may help https://www.experts-exchange.com/questions/20916308/Securing-Exchange-2003-Relay.html