Solved

Exchange sending strange email. Help!

Posted on 2008-06-13
4
275 Views
Last Modified: 2010-03-06
I have a user who, according to Exchange 2003, is sending some erroneous email.

When I track these messages in Exchange, they appear to be sent to server-sa@domain.com.

The strange thing is that I don't have an account for server-sa. Plus, this user only uses OWA. When I check his email, there is no trace of emails being sent to server-sa.

What could this be and how can I resolve it?
0
Comment
Question by:lenivan
  • 2
4 Comments
 
LVL 4

Expert Comment

by:Dovinshka
ID: 21783608
Are these emails being generated on a regular basis or are they random?

You may wish to run a sniffer such as Wireshark, http://www.wireshark.org/  to capture SMTP packets and filter the results.

It could be a rogue application, malware, etc.

Dov.
0
 
LVL 2

Expert Comment

by:4eos
ID: 21783806
Possible backscatter.
0
 

Author Comment

by:lenivan
ID: 21823605
no other ideas?
0
 
LVL 4

Accepted Solution

by:
Dovinshka earned 500 total points
ID: 21827836
Have you tried to run a packet sniffer? This will tell you where traffic is being generated from. You can also filter the results to just show SMTP packets.

You may also wish to configure security auditing to see logon events at the time the email was sent.

Dov.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
how to add IIS SMTP to handle application/Scanner relays into office 365.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now