Remove a Catch All Exchange Event Sink

Posted on 2009-05-02
Last Modified: 2012-05-06

I've taken over the running of an Exchange 2003 server of which the previous admin created a catch all event sink.
I need to remove the event sink now as it just receives too much spam.
I dont know what the event sink is called or which specific address it sends email to only to one of the MD's email alaises.

I've run this command: C:\cscript smtpreg.vbs /enum > c:\file.txt

And have attached the output.
Could anyone tell me which event sink is the one for the catch all sink?
Question by:BenthamLtd
    LVL 4

    Assisted Solution

    From the output attached I don't think CatchAll event sink is running on your exchange server. Also I see, you have TrendMicro for email scanning and exchange seems to be installed on a domain controller.
    Also I would like to know, what make you feel CatchAll event sink is running on exchange?

    CatchAll EventSink should look like below, which I don't see in the output.

    Binding {4F42E36A-0802-4223-A8FF-CA8E49695B93} {
      DisplayName = SMTPScriptingCatchAll
      SinkClass = CDO.SS_SMTPOnArrivalSink
      Status = Enabled
      SourceProperties {
        Priority = 28010
      SinkProperties {
        ScriptName = C:\exchange server\catchall.vbs               (this path may vary).

    Author Comment

    Thanks for the second opinion.
    As I said I inherited this setup so it was not my choice to install it on a DC server.

    I believe that there is a Catch All sink setup because there is one user who seems to receive loads of spam email, but when I look in the headers of the message, none of his email aliases are listed.
    Is there any other way that misspelt email addresses can be send to a postmaster account?
    LVL 4

    Assisted Solution

    * Yes, spam message will appear as - sender as "postmaster" if you check in the queue.
    * How many exchange servers do you have?
    * If one, is that exchange server accepting emails from the Internet? OR are we using third party to filter emails and then forward to exchange?
    * Have we configured RBL on our exchange if exchange is accepting emails from the Internet?
    * What about IMF? are we using it?

    LVL 4

    Accepted Solution

    Also I would like to add, if you have spam that it will be altogether a different issue. As far as CatchAll sink is concerned, it is not hooked up on your exchange server, so CatchAll seems to be ruled out.

    Author Comment

    Great, there was not sink after all, just lots of spam

    Featured Post

    Are your corporate email signatures appalling?

    Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

    Join & Write a Comment

    Easy CSR creation in Exchange 2007,2010 and 2013
    Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now