Solved

Exchange 2007 sending large amounts of data

Posted on 2010-11-30
6
343 Views
Last Modified: 2012-05-10
My firewall is showing large amounts of data per data being sent out from the exchange server.  Is there a good way to determine what is doing this?  
0
Comment
Question by:Dwci
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 12

Expert Comment

by:FarWest
ID: 34239678
what is your firewall, is it ISA?
first make sure that local users are not accessing the exchange via firewall,
second check firewall packets log for destinations, and check if there is a single destination IP used, and weather it is external or internal
good luck
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34239727
You can check the "Queue viewer" tool on EMC to check if there are large number.
Also you can increase the SMTP logging and review the logs to see if any particular user account or WS is compromised.
http://exchangepedia.com/2007/05/exchange-server-2007-logging-smtp-protocol-activity.html

Also make sure that the hub server is not an open relay
0
 

Author Comment

by:Dwci
ID: 34239808
My firewall is a Sonicwall NSA2400 and it doesn't look like it is going out the firewall to get to the exchange server.  It looks to me like the outbound data is very large from the server.  
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:Dwci
ID: 34240667
How do I go about making sure it isn't an open relay?
0
 
LVL 8

Expert Comment

by:rr1968
ID: 34240757
Open EMC, Expand Server configuration, select the HUB server. At th bottom of th center pane you will have "receive connectors" Right click on each connector and go to "NETWORK" TAB. Check "Receive mail from remote servers...."
0
 
LVL 8

Accepted Solution

by:
rr1968 earned 250 total points
ID: 34240858
Here is a nice article, that shows how relaying works:
http://www.petri.co.il/authenticated-or-anonymous-smtp-relay-with-exchange-2007.htm
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question