Exchange 2013 spamming out

jclsandiego
jclsandiego used Ask the Experts™
on
Hi,

Looking for some help. I opened up Exchange Toolbox Queue Viewer and found what looks like spam on it's way out. Here is one of them.

Identity: myserver\x7c7\xxxxxxxxx311xx
Subject: Undeliverable: Look at my new naked photo!
Internet Message ID: <4c8baf54-67b8-43e9-a3cd-adcecb9d7556@myserver.internaldomain.local>
From Address: <>
Status: Ready
Size (KB): 11
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 9:09:19 AM
Expiration Time: 2/7/2019 9:09:19 AM
Last Error:
Queue ID: myserver\4707
Recipients:  nmrpxxxx@xxxxx.com;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=myserver Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mge,DC=local;0


Here is another one:

Identity: myserver\4793\1427xxx8xxx
Subject: Undeliverable: gauker@myexternaldomain.com - New Shark Tank Product Takes Fitness Industry By Storm
Internet Message ID: <aa14e5f7-0716-4f38-8972-533343e7eaec@myserver.myinternaldomain.local>
From Address: <>
Status: Ready
Size (KB): 22
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 2/5/2019 10:11:44 AM
Expiration Time: 2/7/2019 10:11:44 AM
Last Error:
Queue ID: myserver\4793
Recipients:  kayla.karst-gauker=myexternal.com@cemid.icu;2;2;[{LRT=};{LED=};{FQDN=};{IP=}];0;CN=myserver,CN=Connections,CN=myserver Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=local;0



I'm currently running antivirus on all computer but was wondering what other steps should I take? This morning I had hundreds of emails on Queue.

Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
MaheshArchitect
Distinguished Expert 2018

Commented:
Do you have any antispam device / firewall next to Exchange sever OR its directly published on internet?
MaheshArchitect
Distinguished Expert 2018

Commented:
you need to deploy antispam device in front of exchange which can scan inbound and outbound message contents

Author

Commented:
I had an spam solution from sonicwall SOHO on the way in but it was causing issues so I turned it off. I never had a solution other that antivirus on all computers and server. Do you have a recommendation?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Architect
Distinguished Expert 2018
Commented:
Its highly recommended to have proper antispam solution in front of exchange server for incoming and outgoing messages
Else you can enable antispam agent on exchange 2013 mailbox servers at least
https://docs.microsoft.com/en-us/exchange/enable-anti-spam-functionality-on-mailbox-servers-exchange-2013-help

Author

Commented:
Thank you, I will follow the instructions and look into a third party. Really appreciate your help.
Michael B. SmithManaging Consultant

Commented:
Google/Bing "backscatter". It's possible that NOTHING is wrong.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial