Link to home
Start Free TrialLog in
Avatar of jclsandiego
jclsandiegoFlag for United States of America

asked on

Exchange 2013 spamming out

Hi,

Looking for some help. I opened up Exchange Toolbox Queue Viewer and found what looks like spam on it's way out. Here is one of them.

Identity: myserver\x7c7\xxxxxxxxx311xx
Subject: Undeliverable: Look at my new naked photo!
Internet Message ID: <4c8baf54-67b8-43e9-a3cd-adcecb9d7556@myserver.internaldomain.local>
From Address: <>
Status: Ready
Size (KB): 11
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 9:09:19 AM
Expiration Time: 2/7/2019 9:09:19 AM
Last Error:
Queue ID: myserver\4707
Recipients:  nmrpxxxx@xxxxx.com;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=myserver Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mge,DC=local;0


Here is another one:

Identity: myserver\4793\1427xxx8xxx
Subject: Undeliverable: gauker@myexternaldomain.com - New Shark Tank Product Takes Fitness Industry By Storm
Internet Message ID: <aa14e5f7-0716-4f38-8972-533343e7eaec@myserver.myinternaldomain.local>
From Address: <>
Status: Ready
Size (KB): 22
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 10:11:44 AM
Expiration Time: 2/7/2019 10:11:44 AM
Last Error:
Queue ID: myserver\4793
Recipients:  kayla.karst-gauker=myexternal.com@cemid.icu;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=local;0



I'm currently running antivirus on all computer but was wondering what other steps should I take? This morning I had hundreds of emails on Queue.

Thanks
Avatar of Mahesh
Mahesh
Flag of India image

Do you have any antispam device / firewall next to Exchange sever OR its directly published on internet?
you need to deploy antispam device in front of exchange which can scan inbound and outbound message contents
Avatar of jclsandiego

ASKER

I had an spam solution from sonicwall SOHO on the way in but it was causing issues so I turned it off. I never had a solution other that antivirus on all computers and server. Do you have a recommendation?
ASKER CERTIFIED SOLUTION
Avatar of Mahesh
Mahesh
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you, I will follow the instructions and look into a third party. Really appreciate your help.
Google/Bing "backscatter". It's possible that NOTHING is wrong.