I have a couple of clients using SBS 2003 with Exchange and when I look at the Queue's in the Exchange admin I am seeing SMTP connectors to foriegn domains (i.e. .it, .fr, .ru, etc..) and I know it is SPAM.
I found articles on how to freeze the connections and remove them but what I need to figure out is how to identify which machine(s) they are originating from. I have run AV and Root Kits scans on the PC's but have found nothing so I am hoping that Exchange will let me know where the email are coming from.
Thansk in advance for any help and suggestions!