RE: SPAM!!! Just shut down Exchange 2000 Services
- From: "John T \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Tue, 1 Nov 2005 14:22:44 -0800
Sounds like you are a major open relay.
Make sure the server is locked down from relaying is the first step.
Find out what IP the messages are coming from. If internal, you have a
virus/Trojan problem.
John T
eServices For You
> -----Original Message-----
> From: Scott Clarke [mailto:scott.clarke@xxxxxxxxxxxx]
> Sent: Tuesday, November 01, 2005 1:45 PM
> To: [ExchangeList]
> Subject: [exchangelist] SPAM!!! Just shut down Exchange 2000 Services
>
> http://www.MSExchange.org/
>
> Hi all,
>
> Please help. We are getting a HUGE amount of spam. I suspect this shut
> down our Exchange services. I have noticed a lot of messages from
> postmaster@xxxxxxxxxxxx in the Queues folder...and I mean a lot. As a
> result our outbound email was slow getting to its destination. I have
> deleted the postmaster messages to the fictional/spoofed domains and
> outbound email is now fine.
>
> I have also noticed that the Queue is set to retry for 3 days...WOW this
> is crazy...what are your recommendations, 12 hours? 24 hour? The people
> that set this up must have kept the defaults. We run GFI v11 to block
> spam...so it is catching a lot of it but not all.
>
> This issue shut down all exchange services and I had to reboot and get rid
> of the messages in the queues.
>
> Help!
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
