I have a problem with a customer server, I cant stop the exchange queues getting larger and larger.
I think we have been NDR attack.
I have searched internet and tried everything i can find but they still keep coming.
I have checked if open relay, checked al PC and servers for viruses, and also gone though sembee cleaning up after NDR attach.
I seem to be getting thousand of email in queue every few mins. I have blocked port 25 and now using a none existing smart host but still getting lots. I have even ran Microsoft tool - Exchange Support Tools / Aqadmcli ....... this delete queue but they then starting filling up again, so i ran again but keeps happening
Has anyone any ideas please