Solved

Lots of traffic between server and internet causing very slow surfing.

Posted on 2004-09-25
5
226 Views
Last Modified: 2010-03-18
Hi,

I have a windows 2000 server with Exchange 2000 installed. Users have experienced very slow internet surfing recently.

The network connects to the Internet via an ADSL Draytek router. I have shut down all machines and what I notice is that there are lots of packets being sent and received between the server and router. In fact the server is sending twice as many packets as it is receving. This is contineous and never stops

So far I have:
shut down all the exchange services
Virus scanned the server
Rebooted
All security updates have being installed

I have used network monitor to capture some packets and I always see the source or destination port as SMTP. Our Exchange server downloads via POP3 so I am unsure why I keep seeing this. Does anyone have any further ideas on how I can solve this?

0
Comment
Question by:Danbrasco
  • 3
  • 2
5 Comments
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12152444
Sounds most definately like a virus. Try the following:

1. Make sure your virus definition files are up to date (Viruses may kill the update process)
2. Reboot into safe mode and run a system scan again
3. Get a 2nd Opinion from an online virus scanning system like http://housecall.trendmicro.com
4. Run AdAware http://lavasoftusa.com and SpyBot http://www.safer-networking.org/en/index.html to check for other types of nasties
5. Run HijackThis http://www.majorgeeks.com/download3155.html and get the log file analyzed here:
http://hijackthis.de/index.php?langselect=english
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12152449
sorry, the AdAware URL should have been http://www.lavasoftusa.com
0
 

Author Comment

by:Danbrasco
ID: 12156527
I think the problem is to do with the SMTP connector. Under Default SMTP Virtual Server \ Queues there are hundreds of SMTP connectors. I guess these are messages of some sort but I am unsure. They all say Small Business SMTP connector - (website name).

It seems at first glance that my server is being used to relay spam but the I disabled relaying when I first set it up. How do you think all these messages got here? Is there a way of manually deleting them?
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 250 total points
ID: 12156539
How To Block Open SMTP Relaying and Clean Up Exchange Server SMTP Queues on SBS
http://support.microsoft.com/default.aspx?kbid=324958&product=sbserv2003
0
 

Author Comment

by:Danbrasco
ID: 12158529
Many thanks for this.

I spent a lot of time on this but finally managed to get it solved. Problem is, I still don't know how they managed to use my server since I had all the settings for relaying disabled.

Will have to do some further research.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

A brief overview to explain gateways, default gateways and static routes OR NO - you CANNOT have two default gateways on the same server, PC or other Windows-based network device. In simple terms a gateway is formed when a computer such as a serv…
Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now