asked on

Tracking down Queued email

Hi, I have been having issues with out ISPs email gateway being blacklisted and have opted to 'Use DNS to route each address space on this connector" on the default SMTP connector.
When I use this option the outbound queues backup with garbage and I have to use AQADMCLI to flush them. I fear these will cause a blacklisting against my IP address.
I am firewalled and don't thing they originate outside, so that leaves inside PCs acting as bots?
How can I use Exchange or other tools to determine where these messages originate?
TIA
MM

SLafferty1983

If you look at the messages in the queue are they from postmaster@yourdomain.com? If they are then you will need to setup recipient filtering. See this article for more information. http://technet.microsoft.com/en-us/library/aa997261.aspx

Sembee

You need to work out what is actually happening here. If you were using a smart host then you wouldn't see the signs of the server being abused.
You need to check whether it is an open relay, authenticated user, NDR spam etc.

If you look at the messages, what are they? Are they legitimate? Are they from postmaster@

Simon.

Openallnight

ASKER

Hi, I am not using a smarthost gateway as they are a slack cable company and often blacklisted.
I believe this is all NDR stuff from postmaster@mydomainhere.com to nonexistant users @ mydomain.com.
I have checked with relat test pro and all lokes closed. Online relay checks yeild mixed results.
My Authentication is set to Anonymous (if not I get no email), Basic Auth and the domain name is listed.
Relay is set to my subnet granted and allow "all computers which sucessfully authenticate"

SLafferty1983: I dont believe recipient filtering is a solution as there is no way to build an accepted list and a rejected list would become an endless labour?

ASKER CERTIFIED SOLUTION

Sembee

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION