exchange 2003 and spam at network

Hi Experts
I need your helps immediattly.

I have a exchange 2003 server on my network . I think i have a spam mail in my network.I get every day undelivered mail retorned to sender mail.
I think one of our mail box try to send a mail .But i do not know i can i find it who sends this mail from my network.
please give me ideas or solutions.

Thanks
apollo-13Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alan HardistyCo-OwnerCommented:
Please have a read of my article and check if you have mail building up in your queues:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2556-Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html

If not, then you are probably suffering from NDR spam and that means implementing some good Anti-Spam software, of which you can trial some great software such as Vamsoft ORF Fusion (www.vamsoft.com) and that should help eliminate the problem for you.

Alan

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
apollo-13Author Commented:
i get every day Mail Delivery System MAILER-DAEMON@  and subcejt : Undelivered Mail Returned to Sender.

I think ,one of my user sent mail and the otherside server respons like above. But who?

and every returned mail diffrent mail address i see
apollo-13Author Commented:
in this email a link from this server. I cocntacted with them and they say i try to send spam mail and they block my mail.

mx.mail.domain[ip] said: 550 spam message     rejected.

But how i find who send from us this mail?
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Alan HardistyCo-OwnerCommented:
Have you looked in your outbound queue on the server?  If not - please do and check if anything is sitting there waiting to go out and reference my article for what to do depending on what's in the queue and who the senders are.

Alan
apollo-13Author Commented:
hi alan
Have you looked in your outbound queue on the server? where can i see that?
Alan HardistyCo-OwnerCommented:
To open Queue Viewer, follow these steps:

Click Start, go to Programs, Microsoft Exchange, and then select System Manager.
Expand the Servers container. The Servers container may be located under the Administrative Groups container, depending on the options that are enabled on your server.
Expand the server that contains the queues that you want to view.
Click Queues to start Queue Viewer.

Alan
apollo-13Author Commented:
yes there is 10 queue mail
apollo-13Author Commented:
but if i click no info
Alan HardistyCo-OwnerCommented:
If you double-click the messages in the queue, can't you see who the sender is?
apollo-13Author Commented:
no i cant see
tmoore1962Commented:
Go to the person's outlook and open the NDR and then view header information.  Should give you the sending email server address.  Most likely if your exchange is properly configured then the users email has been spoofed.  You could also check this by configuring your server not to generate NDR's and see if they are still showing up
apollo-13Author Commented:
Hi tmoore , But my problem is .one of my user sends a mail and destination  server send me back with NDR mail. This NDR info not from my server ,from other side server.

I just look at that how can i find my user who sends that mail
apollo-13Author Commented:
i think i found it. There is a mail distiribution group ,i think this send mail to other server.

can i disable it somehow?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.