Solved

Exchange 2003 Server Spam ibeing sent but not an open relay

Posted on 2008-10-15
3
192 Views
Last Modified: 2010-03-06
Hi,
I am having trouble with spam being sent through my Exchange 2003 Sp2 server. It is not an open relay.
But 2 users accounts were sending mail out.
From:   Shelly Stengel Sent:  Wed 10/15/2008 3:03 AM
To:    
Cc:    
Subject:   Your Email Address Attached to E-ticket Number: 56475600545188
Attachments:  
This what teh message look like. I have a bunch sitting in the mail queue.
We have a spam appliance and i thought about using smart relay but can't get that to work right
Any ideas on what to check or if anyoen else has seen issue like this
Thanks
Ryan

0
Comment
Question by:carrollu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 2

Accepted Solution

by:
scottbortis earned 500 total points
ID: 22722015
looks like you have a worm in your network.  Use a network stiffer to see who is passing the traffic .  The one that is sending information to your exchange server at the time set is probably your wormed computer.  Run AV/Spyware sweeps on it.
0
 

Author Comment

by:carrollu
ID: 22722054
So the system would have be on our network then to pass this to teh exchange server. i have 11GB log file. any good tools to parse this to find the IP maybe?
0
 

Author Comment

by:carrollu
ID: 22722415
i checked the affected users pc's nothing onthem they are clean
0

Featured Post

Ready to get started with anonymous questions?

It's easy! Check out this step-by-step guide for asking an anonymous question on Experts Exchange.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question