Un-Authorized email being sent from Exchange 2003

Posted on 2009-12-30
Last Modified: 2013-11-30
Hi Everyone,

I am running a Windows 2003 Standard server (All up to date with Service Packs) and Microsoft Exchange 2003 Enterprise SP2.  We noticed the server was getting bogged down, the SMTP queue was enormous, and we keep getting blacklisted.  We have about 80 mailboxes on the server.  Everyone uses Outlook 2003 or 2007.  20 accounts are Exchange clients and the rest are popping.  I checked and double checked that we are not an open relay.  We have run numerous virus scans on the desktops and the server.  We spent 7 hours with a Microsoft tech and the response is Exchange doesnt have a way of showing who has authenticated and sent mail.  We are now using a paid smart house (AuthSMTP) to send mail (Had to do it because of the blacklisting).  In their report options I can see that the server is sending mail  FROM:  email accounts that are not any of the 5 domains hosted on the Exchange server.

Any help would be appreciated.

Question by:daslz
    LVL 76

    Accepted Solution

    Please have a read of my FAQ for this particular problem which should help identify the problem, breached account (if applicable) and how to resolve the problem:
    LVL 76

    Expert Comment

    by:Alan Hardisty
    If you are not an open relay, then you will be an authenticated relay.  My FAQ will advise you hot to resolve this problem.

    Author Closing Comment

    Thanks for the help.  It was a webmaster account with a weak password
    LVL 76

    Expert Comment

    by:Alan Hardisty
    Excellent - glad you tracked it down and hope you stay clean.
    Thanks for the points.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Find out how to use dynamic social media in email signatures with this top 10 DOs & DON’Ts.
    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now