Avatar of jclsandiego
jclsandiego
Flag for United States of America asked on

Exchange 2013 spamming out

Hi,

Looking for some help. I opened up Exchange Toolbox Queue Viewer and found what looks like spam on it's way out. Here is one of them.

Identity: myserver\x7c7\xxxxxxxxx311xx
Subject: Undeliverable: Look at my new naked photo!
Internet Message ID: <4c8baf54-67b8-43e9-a3cd-adcecb9d7556@myserver.internaldomain.local>
From Address: <>
Status: Ready
Size (KB): 11
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 9:09:19 AM
Expiration Time: 2/7/2019 9:09:19 AM
Last Error:
Queue ID: myserver\4707
Recipients:  nmrpxxxx@xxxxx.com;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=myserver Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mge,DC=local;0


Here is another one:

Identity: myserver\4793\1427xxx8xxx
Subject: Undeliverable: gauker@myexternaldomain.com - New Shark Tank Product Takes Fitness Industry By Storm
Internet Message ID: <aa14e5f7-0716-4f38-8972-533343e7eaec@myserver.myinternaldomain.local>
From Address: <>
Status: Ready
Size (KB): 22
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 10:11:44 AM
Expiration Time: 2/7/2019 10:11:44 AM
Last Error:
Queue ID: myserver\4793
Recipients:  kayla.karst-gauker=myexternal.com@cemid.icu;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=local;0



I'm currently running antivirus on all computer but was wondering what other steps should I take? This morning I had hundreds of emails on Queue.

Thanks
Exchange* sending spam

Avatar of undefined
Last Comment
Michael B. Smith

8/22/2022 - Mon
Mahesh

Do you have any antispam device / firewall next to Exchange sever OR its directly published on internet?
Mahesh

you need to deploy antispam device in front of exchange which can scan inbound and outbound message contents
jclsandiego

ASKER
I had an spam solution from sonicwall SOHO on the way in but it was causing issues so I turned it off. I never had a solution other that antivirus on all computers and server. Do you have a recommendation?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER CERTIFIED SOLUTION
Mahesh

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
jclsandiego

ASKER
Thank you, I will follow the instructions and look into a third party. Really appreciate your help.
Michael B. Smith

Google/Bing "backscatter". It's possible that NOTHING is wrong.