?
Solved

Exchange 2003 Server Spam ibeing sent but not an open relay

Posted on 2008-10-15
3
Medium Priority
?
195 Views
Last Modified: 2010-03-06
Hi,
I am having trouble with spam being sent through my Exchange 2003 Sp2 server. It is not an open relay.
But 2 users accounts were sending mail out.
From:   Shelly Stengel Sent:  Wed 10/15/2008 3:03 AM
To:    
Cc:    
Subject:   Your Email Address Attached to E-ticket Number: 56475600545188
Attachments:  
This what teh message look like. I have a bunch sitting in the mail queue.
We have a spam appliance and i thought about using smart relay but can't get that to work right
Any ideas on what to check or if anyoen else has seen issue like this
Thanks
Ryan

0
Comment
Question by:carrollu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 2

Accepted Solution

by:
scottbortis earned 1500 total points
ID: 22722015
looks like you have a worm in your network.  Use a network stiffer to see who is passing the traffic .  The one that is sending information to your exchange server at the time set is probably your wormed computer.  Run AV/Spyware sweeps on it.
0
 

Author Comment

by:carrollu
ID: 22722054
So the system would have be on our network then to pass this to teh exchange server. i have 11GB log file. any good tools to parse this to find the IP maybe?
0
 

Author Comment

by:carrollu
ID: 22722415
i checked the affected users pc's nothing onthem they are clean
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question