Link to home
Start Free TrialLog in
Avatar of lenivan
lenivan

asked on

Exchange sending strange email. Help!

I have a user who, according to Exchange 2003, is sending some erroneous email.

When I track these messages in Exchange, they appear to be sent to server-sa@domain.com.

The strange thing is that I don't have an account for server-sa. Plus, this user only uses OWA. When I check his email, there is no trace of emails being sent to server-sa.

What could this be and how can I resolve it?
Avatar of Dovinshka
Dovinshka

Are these emails being generated on a regular basis or are they random?

You may wish to run a sniffer such as Wireshark, http://www.wireshark.org/  to capture SMTP packets and filter the results.

It could be a rogue application, malware, etc.

Dov.
Possible backscatter.
Avatar of lenivan

ASKER

no other ideas?
ASKER CERTIFIED SOLUTION
Avatar of Dovinshka
Dovinshka

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial