Link to home
Create AccountLog in
Exchange

Exchange

--

Questions

--

Followers

Top Experts

Avatar of RChadwick108
RChadwick108

Exchange Server sending out spam.
I have a customer running SBS 2003.  When I look in the Exchange Queues i have a lot of messages with the sender being admin@partners1stcu.org.  That is not the companys name, so I think someone is using their server to send out spam.  I have run a virus scan and found nothing.  I'm not sure what the next step is I need to take.  

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Avatar of NeilParbrookNeilParbrook🇬🇧

Have ypou checked the client machines to see if they have an infection that is sending the mail out.
Avatar of RChadwick108RChadwick108

ASKER

Yes i have  but i am running another scan now just to be sure.
Avatar of NeilParbrookNeilParbrook🇬🇧

That would be what I would check first.
Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

ASKER CERTIFIED SOLUTION
Avatar of NeilParbrookNeilParbrook🇬🇧

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account
Avatar of NeilParbrookNeilParbrook🇬🇧

Also turn on logging on the SMTP virtual server and review logs to see whats going on.
Avatar of MarkMichaelMarkMichael

Have you made sure that your SMTP server is not an open relay?
Avatar of MarkMichaelMarkMichael

Indeed, see above!
Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Avatar of RChadwick108RChadwick108

ASKER

They are not an open relay
Avatar of NeilParbrookNeilParbrook🇬🇧

Have you got anything from the logs?
Avatar of RChadwick108RChadwick108

ASKER

the last thing in the logs is
Event Type:      Error
Event Source:      MSExchangeTransport
Event Category:      SMTP Protocol
Event ID:      7010
Date:            2/15/2008
Time:            10:28:05 AM
User:            N/A
Computer:      SERVER
Description:
This is an SMTP protocol log for virtual server ID 1, connection #2. The client at "118.169.201.25" sent a "rcpt" command, and the SMTP server responded with "550 5.7.1 Unable to relay for candy59839@yahoo.com.tw  ". The full command sent was "rcpt to:<candy59839@yahoo.com.tw>".  This will probably cause the connection to fail.

For more information, click http://www.microsoft.com/contentredirect.asp.
Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

Avatar of RChadwick108RChadwick108

ASKER

Now when i look at some of the messages in the mail queue, there is no one listed under sender.
SOLUTION
Avatar of kieran_bkieran_b🇦🇺

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account
Avatar of RChadwick108RChadwick108

ASKER

Ok i've disabled authenticated relaying.  I will let you know what happens.
Exchange

Exchange

--

Questions

--

Followers

Top Experts

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.