• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 204
  • Last Modified:

Exchange 2003 Server Spam ibeing sent but not an open relay

Hi,
I am having trouble with spam being sent through my Exchange 2003 Sp2 server. It is not an open relay.
But 2 users accounts were sending mail out.
From:   Shelly Stengel Sent:  Wed 10/15/2008 3:03 AM
To:    
Cc:    
Subject:   Your Email Address Attached to E-ticket Number: 56475600545188
Attachments:  
This what teh message look like. I have a bunch sitting in the mail queue.
We have a spam appliance and i thought about using smart relay but can't get that to work right
Any ideas on what to check or if anyoen else has seen issue like this
Thanks
Ryan

0
carrollu
Asked:
carrollu
  • 2
1 Solution
 
scottbortisCommented:
looks like you have a worm in your network.  Use a network stiffer to see who is passing the traffic .  The one that is sending information to your exchange server at the time set is probably your wormed computer.  Run AV/Spyware sweeps on it.
0
 
carrolluAuthor Commented:
So the system would have be on our network then to pass this to teh exchange server. i have 11GB log file. any good tools to parse this to find the IP maybe?
0
 
carrolluAuthor Commented:
i checked the affected users pc's nothing onthem they are clean
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now