Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Exchange 2007 sending large amounts of data

Posted on 2010-11-30
6
Medium Priority
?
347 Views
Last Modified: 2012-05-10
My firewall is showing large amounts of data per data being sent out from the exchange server.  Is there a good way to determine what is doing this?  
0
Comment
Question by:Dwci
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 12

Expert Comment

by:FarWest
ID: 34239678
what is your firewall, is it ISA?
first make sure that local users are not accessing the exchange via firewall,
second check firewall packets log for destinations, and check if there is a single destination IP used, and weather it is external or internal
good luck
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34239727
You can check the "Queue viewer" tool on EMC to check if there are large number.
Also you can increase the SMTP logging and review the logs to see if any particular user account or WS is compromised.
http://exchangepedia.com/2007/05/exchange-server-2007-logging-smtp-protocol-activity.html

Also make sure that the hub server is not an open relay
0
 

Author Comment

by:Dwci
ID: 34239808
My firewall is a Sonicwall NSA2400 and it doesn't look like it is going out the firewall to get to the exchange server.  It looks to me like the outbound data is very large from the server.  
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Dwci
ID: 34240667
How do I go about making sure it isn't an open relay?
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34240757
Open EMC, Expand Server configuration, select the HUB server. At th bottom of th center pane you will have "receive connectors" Right click on each connector and go to "NETWORK" TAB. Check "Receive mail from remote servers...."
0
 
LVL 8

Accepted Solution

by:
rr1968 earned 1000 total points
ID: 34240858
Here is a nice article, that shows how relaying works:
http://www.petri.co.il/authenticated-or-anonymous-smtp-relay-with-exchange-2007.htm
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question