[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 396
  • Last Modified:

Spam Mails

HI

There is spam mails spreading through one of my Public IP which used as MX record, and IP already blacklisted, can anyone help how to trace the source of Spam mails.
I am using Exchange 2010..

Thanks
Jamsh
0
Ffpgroup
Asked:
Ffpgroup
  • 2
1 Solution
 
Alan HardistyCommented:
Do you have port 25 closed on your firewall for all internal IP's other than your Exchange server?  If not - please secure your firewall by doing so.

If you haven't, then you most likely have an infected computer, so a full AV scan of ALL machines would be in order.

If not - please advise.
0
 
ajwukCommented:
Hi,
 It's likely you have an infected PC somewhere. Do you have a firewall in place which you can use to block port 25 outbound to see what device is creating the traffic?
0
 
FfpgroupAuthor Commented:
I have added deny port 25 in firewall..
is there any other option to monitor it
THX
0
 
Alan HardistyCommented:
If your firewall can log port 25 outbound, you should quickly be able to see which machine(s) are trying to send out using that port.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now