Spam problem

We recently were affected by spam in our office.   Our ISP blacklisted us because of it.  We block the port 25 through out the office.  Only the exchange server can communicate with port 25.  Today I realized that the exchange queue is still loaded with spam messages.   How can that be?  Can spam use someones outlook account to send mail through the exchange?  What can I do to remedy the situation.  How can i find the culprit...
LilganstaAsked:
Who is Participating?
 
dmessmanCommented:
It seems pretty evident that a virus or worm or spambot or whatever is on one of your machines.  

If I'm correct, SBS 2003 will allow any machine on the LAN to send through it without authentication.  But then again, how do we know you're not an open relay?

Step 1:
Enter your server in here:
http://www.mxtoolbox.com/diagnostic.aspx

Step 2:
Run antivirus tools on all your PCs.  Also run malwarebytes on each PC (http://www.malwarebytes.org/products/malwarebytes_free)

0
 
Alan HardistyCo-OwnerCommented:
Please have a read of my article and see if you have issues outlined in my article (Authenticated Relay predominantly):

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2556-Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html

Alan
0
 
LilganstaAuthor Commented:
It was not a ndr attack so I had to use an antispam service...  from that point on everything was ok.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.