troubleshooting Question

Exchange 2003 used as a relay, help please.

Avatar of DuffyS40
DuffyS40 asked on
ExchangeWindows Server 2003
15 Comments1 Solution582 ViewsLast Modified:
I have one Exchange 2003 SP2, its currently spamming out like mad, I logged the transactions and they are from outside, I have already stopped any relay under Virtual-SMTP, changed the Admin password, changed the users passwords, yet they are still coming through, I dont think its from internal PC because all the IPs are showing as external, such as from Holland, Canada etc.

What else can I do to stop this relay ??

Heres part of the log file:
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2012-06-29 11:52:12
#Fields: date time c-ip cs-username s-ip s-port cs-host
2012-06-29 11:52:12 75.180.132.243 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 66.54.152.4 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 75.180.132.243 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 46.4.167.9 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 46.4.167.9 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 80.113.5.98 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 75.180.132.243 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 193.85.160.138 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 212.79.230.246 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 212.79.230.246 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionResponse - 25 -
2012-06-29 11:52:12 178.79.147.207 OutboundConnectionCommand - 25 -
2012-06-29 11:52:12 212.79.230.246 OutboundConnectionResponse - 25 -
ASKER CERTIFIED SOLUTION
Join our community to see this answer!
Unlock 1 Answer and 15 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 15 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros