Solved

Is my server sending SPAM?

Posted on 2014-03-31
1
670 Views
Last Modified: 2014-03-31
Looking today at the Exchange message queue while dealing with a mail delivery problem and ran across about 25 entries that look like this:

Identity: FW-DC-1\88254\31761283153941
Subject: Undeliverable: Dear e759f257 Personal 70% OFF
Internet Message ID: <7be3e167-10b1-4c83-b9ad-08f1d147ecc6@FW-DC-1.Falcor.local>
From Address: <>
Status: Ready
Size (KB): 16
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 3/30/2014 1:16:42 AM
Expiration Time: 4/1/2014 1:16:42 AM
Last Error: 400 4.4.7 Message delayed
Queue ID: FW-DC-1\88254
Recipients:  e759f257@airtelbroadband.in;2;2;[{LRT=};{LED=400 4.4.7 Message delayed};{FQDN=};{IP=}];0;CN=Internet,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Falcor,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Falcor,DC=local

Running server 2008, Exchange 2013 Enterprise.  How do I tell where these are coming from?
0
Comment
Question by:HCPCJJ1
1 Comment
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
Comment Utility
They are probably NDRs, where the server is rejecting email for non-valid recipients. Enabling recipient filtering on the server will stop them.

This is known as backscatter and doesn't mean your server is being abused.

Simon.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Outlook Free & Paid Tools
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
how to add IIS SMTP to handle application/Scanner relays into office 365.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now