?
Solved

Exchange 2007 sending large amounts of data

Posted on 2010-11-30
6
Medium Priority
?
346 Views
Last Modified: 2012-05-10
My firewall is showing large amounts of data per data being sent out from the exchange server.  Is there a good way to determine what is doing this?  
0
Comment
Question by:Dwci
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 12

Expert Comment

by:FarWest
ID: 34239678
what is your firewall, is it ISA?
first make sure that local users are not accessing the exchange via firewall,
second check firewall packets log for destinations, and check if there is a single destination IP used, and weather it is external or internal
good luck
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34239727
You can check the "Queue viewer" tool on EMC to check if there are large number.
Also you can increase the SMTP logging and review the logs to see if any particular user account or WS is compromised.
http://exchangepedia.com/2007/05/exchange-server-2007-logging-smtp-protocol-activity.html

Also make sure that the hub server is not an open relay
0
 

Author Comment

by:Dwci
ID: 34239808
My firewall is a Sonicwall NSA2400 and it doesn't look like it is going out the firewall to get to the exchange server.  It looks to me like the outbound data is very large from the server.  
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:Dwci
ID: 34240667
How do I go about making sure it isn't an open relay?
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34240757
Open EMC, Expand Server configuration, select the HUB server. At th bottom of th center pane you will have "receive connectors" Right click on each connector and go to "NETWORK" TAB. Check "Receive mail from remote servers...."
0
 
LVL 8

Accepted Solution

by:
rr1968 earned 1000 total points
ID: 34240858
Here is a nice article, that shows how relaying works:
http://www.petri.co.il/authenticated-or-anonymous-smtp-relay-with-exchange-2007.htm
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
A couple of months ago we ran into an issue that necessitated re-creating our Edge Subscriptions. However, when we attempted to execute the command: New-EdgeSubscription -filename C:\NewEdgeSub_01.xml we received an error indicating that the LDAP se…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question