lenivan
asked on
Exchange sending strange email. Help!
I have a user who, according to Exchange 2003, is sending some erroneous email.
When I track these messages in Exchange, they appear to be sent to server-sa@domain.com.
The strange thing is that I don't have an account for server-sa. Plus, this user only uses OWA. When I check his email, there is no trace of emails being sent to server-sa.
What could this be and how can I resolve it?
When I track these messages in Exchange, they appear to be sent to server-sa@domain.com.
The strange thing is that I don't have an account for server-sa. Plus, this user only uses OWA. When I check his email, there is no trace of emails being sent to server-sa.
What could this be and how can I resolve it?
Possible backscatter.
ASKER
no other ideas?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You may wish to run a sniffer such as Wireshark, http://www.wireshark.org/ to capture SMTP packets and filter the results.
It could be a rogue application, malware, etc.
Dov.