Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 933
  • Last Modified:

Remove a Catch All Exchange Event Sink

Hi,

I've taken over the running of an Exchange 2003 server of which the previous admin created a catch all event sink.
I need to remove the event sink now as it just receives too much spam.
I dont know what the event sink is called or which specific address it sends email to only to one of the MD's email alaises.

I've run this command: C:\cscript smtpreg.vbs /enum > c:\file.txt

And have attached the output.
Could anyone tell me which event sink is the one for the catch all sink?
eventsinks.txt
0
BenthamLtd
Asked:
BenthamLtd
  • 3
  • 2
3 Solutions
 
kdagliCommented:
From the output attached I don't think CatchAll event sink is running on your exchange server. Also I see, you have TrendMicro for email scanning and exchange seems to be installed on a domain controller.
Also I would like to know, what make you feel CatchAll event sink is running on exchange?

CatchAll EventSink should look like below, which I don't see in the output.

Binding {4F42E36A-0802-4223-A8FF-CA8E49695B93} {
  DisplayName = SMTPScriptingCatchAll
  SinkClass = CDO.SS_SMTPOnArrivalSink
  Status = Enabled
  SourceProperties {
    Priority = 28010
  }
  SinkProperties {
    ScriptName = C:\exchange server\catchall.vbs               (this path may vary).
  }
}
0
 
BenthamLtdAuthor Commented:
Thanks for the second opinion.
As I said I inherited this setup so it was not my choice to install it on a DC server.

I believe that there is a Catch All sink setup because there is one user who seems to receive loads of spam email, but when I look in the headers of the message, none of his email aliases are listed.
Is there any other way that misspelt email addresses can be send to a postmaster account?
0
 
kdagliCommented:
* Yes, spam message will appear as - sender as "postmaster" if you check in the queue.
* How many exchange servers do you have?
* If one, is that exchange server accepting emails from the Internet? OR are we using third party to filter emails and then forward to exchange?
* Have we configured RBL on our exchange if exchange is accepting emails from the Internet?
* What about IMF? are we using it?

0
 
kdagliCommented:
Also I would like to add, if you have spam that it will be altogether a different issue. As far as CatchAll sink is concerned, it is not hooked up on your exchange server, so CatchAll seems to be ruled out.
0
 
BenthamLtdAuthor Commented:
Great, there was not sink after all, just lots of spam
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now