Link to home
Start Free TrialLog in
Avatar of baileytibbs
baileytibbsFlag for Afghanistan

asked on

Exchange Queues

Hi,

We have experienced some form of attack on our Exchange Server involving NDR reports and the postmaster account.  

We have now implemented the advice from Microsoft regarding this matter but we have been left with about 2800 message queues with the number of messages in each ranging from about 40 down to 1.

Does anybody have a quick way of deleting these or do I have to click on each queue, find the messages within the queue and then delete them?

Also does anybody know what the message icons mean.  Some have red circles by the message icon and others have green icons?

Thanks

ASKER CERTIFIED SOLUTION
Avatar of redseatechnologies
redseatechnologies
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ryandale56
ryandale56

i am getting this same problem....I had 10's of thousands of e-mails (from postmaster) going to yahoo.com.tw and a few other .tw domains....I did the recommended changes to enable the "recipient filter."  However, now my queues are filling up with mail going to the same domains (yahoo.com.tw, yam.com.tw, and some others) with senders like this:

=?big5?B?obTDral3qrqmrKRKobQ=?= <Trevor_Trinity258@ms9.url.com.tw>



You need to ensure that you go through my article completely to make sure that you have correctly diagnosed which attack you are under and how to clean it up. It can take a number of attempts to clean the queues.

Simon.
Avatar of baileytibbs

ASKER

Thanks.  That was great advice