We help IT Professionals succeed at work.

Exchange 2003 Paypal SPAM problem

HI there

I have a SBS 2003 server. I have suddenly got a load of extra SMTP quese that have failed trying to deliver an email from service@paypal.com
These are SPAM emails and I want to find which pc is sending them on my network
Comment
Watch Question

Alan HardistyCo-Owner
CERTIFIED EXPERT
Top Expert 2011

Commented:

Author

Commented:
HI Alan
I have outbound email disabled at the moment. If I enable the otbound email and look at the message as your article suggests then I see that the sender is service@paypal.com
I have raised the diagmostic logging to max for authentication. The application event log has many event IDs of 4006 and 3006
Co-Owner
CERTIFIED EXPERT
Top Expert 2011
Commented:
Neither error is going to help isolate the account.  The 4006 error is a problem sending mail to a domain and not sure about the 3006.

My article advises the error to look for.  It usually turns out to be an old account that hasn't been used for a while and the password is weak.

You could follow the advice in my 2nd blog by changing the Authentication methods (then restarting the SMTP service) and stop this from happening immediately.  You then should change ALL your passowrds to strong passwords and make sure you set them to be changed regularly.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.