Exchange 2013 DL hack

How to find the health of distribution list and find the source if it has been hacked.

We received a an email from client suggesting they receive email from our distribution list. How to completely secure any reply form DL. should msservicepermission on reply be disabled for DL? as it is the only permission send as for DL?
LVL 4
pchettriIT DirectorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

yo_beeDirector of Information TechnologyCommented:
Do you know if this address was ever used to Send As?
Look at the security on this object and see if there are any users that have rights to Send As. This would be the first place I would look. If there are no users that have this right then I would suspect that your address was spoofed.
0
pchettriIT DirectorAuthor Commented:
no one has rights to send as. I was trying to find how it got hacked and could not find any logs on exchange server
0
pchettriIT DirectorAuthor Commented:
it was web developer who had used DL for old campaign on centos server for auto reply. He responded after 18 hrs. Just had be worried about hacking for nothing when I did not see anything on delivery report
0
yo_beeDirector of Information TechnologyCommented:
It was not truly hack most likely, but spoofed.  If you can get the recipient to send you the original e-mail you can look at the header information and see the origin of the e-mails.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.