Hi Lee Ann, I had this problem and found that my server had been hi jacked and used as a mail relay server !!!!!!! if you are the same it is not easy to rid it............ I take it that there is massive traffic on the network ( the hub is constantly flashing but taking the server of line and the traffic stops ? ) ........ it is some months now since I did finally get rid of it........ if I am correct in my assumption please mail me back and I will try and remember all the steps I took ......... if not then I am sorry to have bothered you....... regards steve alcock Calderglen Computers Calder House Spring Lane Colne Lancs BB8 9BD www.calderglen.net phone : +44 (0) 1282 871717 -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: 27 June 2005 08:32 To: [ExchangeList] Subject: [exchangelist] RE: BadMail Directory http://www.MSExchange.org/ It sounds like you are relaying, either because of bad configuration or passwords have been compromised. John T eServices For You > -----Original Message----- > From: Lee [mailto:swanson@xxxxxxxxxx] > Sent: Saturday, June 25, 2005 9:48 PM > To: [ExchangeList] > Subject: [exchangelist] BadMail Directory > > http://www.MSExchange.org/ > > > I'm at my wits' end here and not sure what to do.... > > Have an Exchange 2000 install w/ SP3 and security rollup installed. I > believe relay is configured per MS instructions. > > What's happening is the badmail directory is filling up w/ a few thousand > entries everyday. It appears that someone is sending spam to every name in > the dictionary attached to @mycompany.com. When I look in the ESM, it shows > a couple dozen queues in the SMTP Protocol from domains that are basically > "junk." Tried putting these to be filtered out, but they keep coming back w/ > other domain names. > > Is there anyway of keeping this stuff out or is it something I need to live > w/ since this users are not getting this mail. > > Thanks. > > Lee Ann > Lake Norden, SD > > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 ISA Server Resource Site: http://www.isaserver.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this MSEXchange.org Discussion List as: > johnlist@xxxxxxxxxxxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > Report abuse to listadmin@xxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: steve.alcock@xxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx
