exchange 2003 and spam at network

Hi Experts
I need your helps immediattly.

I have a exchange 2003 server on my network . I think i have a spam mail in my network.I get every day undelivered mail retorned to sender mail.
I think one of our mail box try to send a mail .But i do not know i can i find it who sends this mail from my network.
please give me ideas or solutions.

Thanks
apollo-13Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alan HardistyCo-OwnerCommented:
Please have a read of my article and check if you have mail building up in your queues:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2556-Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html

If not, then you are probably suffering from NDR spam and that means implementing some good Anti-Spam software, of which you can trial some great software such as Vamsoft ORF Fusion (www.vamsoft.com) and that should help eliminate the problem for you.

Alan
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
apollo-13Author Commented:
i get every day Mail Delivery System MAILER-DAEMON@  and subcejt : Undelivered Mail Returned to Sender.

I think ,one of my user sent mail and the otherside server respons like above. But who?

and every returned mail diffrent mail address i see
0
apollo-13Author Commented:
in this email a link from this server. I cocntacted with them and they say i try to send spam mail and they block my mail.

mx.mail.domain[ip] said: 550 spam message     rejected.

But how i find who send from us this mail?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Alan HardistyCo-OwnerCommented:
Have you looked in your outbound queue on the server?  If not - please do and check if anything is sitting there waiting to go out and reference my article for what to do depending on what's in the queue and who the senders are.

Alan
0
apollo-13Author Commented:
hi alan
Have you looked in your outbound queue on the server? where can i see that?
0
Alan HardistyCo-OwnerCommented:
To open Queue Viewer, follow these steps:

Click Start, go to Programs, Microsoft Exchange, and then select System Manager.
Expand the Servers container. The Servers container may be located under the Administrative Groups container, depending on the options that are enabled on your server.
Expand the server that contains the queues that you want to view.
Click Queues to start Queue Viewer.

Alan
0
apollo-13Author Commented:
yes there is 10 queue mail
0
apollo-13Author Commented:
but if i click no info
0
Alan HardistyCo-OwnerCommented:
If you double-click the messages in the queue, can't you see who the sender is?
0
apollo-13Author Commented:
no i cant see
0
tmoore1962Commented:
Go to the person's outlook and open the NDR and then view header information.  Should give you the sending email server address.  Most likely if your exchange is properly configured then the users email has been spoofed.  You could also check this by configuring your server not to generate NDR's and see if they are still showing up
0
apollo-13Author Commented:
Hi tmoore , But my problem is .one of my user sends a mail and destination  server send me back with NDR mail. This NDR info not from my server ,from other side server.

I just look at that how can i find my user who sends that mail
0
apollo-13Author Commented:
i think i found it. There is a mail distiribution group ,i think this send mail to other server.

can i disable it somehow?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.