• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 466
  • Last Modified:

Exchange Queues

Hi,

We have experienced some form of attack on our Exchange Server involving NDR reports and the postmaster account.  

We have now implemented the advice from Microsoft regarding this matter but we have been left with about 2800 message queues with the number of messages in each ranging from about 40 down to 1.

Does anybody have a quick way of deleting these or do I have to click on each queue, find the messages within the queue and then delete them?

Also does anybody know what the message icons mean.  Some have red circles by the message icon and others have green icons?

Thanks

0
baileytibbs
Asked:
baileytibbs
1 Solution
 
redseatechnologiesCommented:
Hi baileytibbs,

Sembee has a guide specifically for this -> http://www.amset.info/exchange/spam-cleanup.asp

The section you want is down the bottom "Cleaning up the server"

Hope that helps,

-red
0
 
ryandale56Commented:
i am getting this same problem....I had 10's of thousands of e-mails (from postmaster) going to yahoo.com.tw and a few other .tw domains....I did the recommended changes to enable the "recipient filter."  However, now my queues are filling up with mail going to the same domains (yahoo.com.tw, yam.com.tw, and some others) with senders like this:

=?big5?B?obTDral3qrqmrKRKobQ=?= <Trevor_Trinity258@ms9.url.com.tw>



0
 
SembeeCommented:
You need to ensure that you go through my article completely to make sure that you have correctly diagnosed which attack you are under and how to clean it up. It can take a number of attempts to clean the queues.

Simon.
0
 
baileytibbsAuthor Commented:
Thanks.  That was great advice
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now