Spam

We are running Exchange 2003.  One of our email addresses is sending out spam.  We are having a hard time identifying the address that has been hijacked.  Is there a software or other method for identifying the address that is generating it.  It is flooding my system.  HELP!!!!
quicktellAsked:
Who is Participating?
 
SembeeCommented:
How have you identified this problem?
One of your accounts has probably been compromised. If you haven't already, change your administrator password and then restart the SMTP service.

Then take a look at my spam cleanup article. http://www.amset.info/exchange/spam-cleanup.asp

Simon.
0
 
Ehab SalemIT ManagerCommented:
I do not understand exactly your problem.
Is someone using one of your emails to send spam? from the user's machine?
0
 
susanzeiglerCommented:
When you say it is flooding your system--can you see outgoing messages in the queue that are spawn or is it inbound NDRs that are flooding you?

Is it possible that it is actually just a "Joe-Job"? This is when someone, using a completely different server, uses someone elses email account in the "from" line.

If you are receiving NDRs from outside, you can examine the headers to see where the mail originated--whether it was inside your organization or external.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.