RE: SPAM!!! Just shut down Exchange 2000 Services

  • From: "Clarke, Scott" <Scott.Clarke@xxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 2 Nov 2005 10:26:17 -0330

How do I test if we are an open relay?

-----Original Message-----
From: John T (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, November 01, 2005 6:53 PM
To: [ExchangeList]
Subject: [exchangelist] RE: SPAM!!! Just shut down Exchange 2000
Services


http://www.MSExchange.org/

Sounds like you are a major open relay.

Make sure the server is locked down from relaying is the first step.

Find out what IP the messages are coming from. If internal, you have a
virus/Trojan problem.

John T
eServices For You


> -----Original Message-----
> From: Scott Clarke [mailto:scott.clarke@xxxxxxxxxxxx]
> Sent: Tuesday, November 01, 2005 1:45 PM
> To: [ExchangeList]
> Subject: [exchangelist] SPAM!!! Just shut down Exchange 2000 Services
> 
> http://www.MSExchange.org/
> 
> Hi all,
> 
> Please help.  We are getting a HUGE amount of spam.  I suspect this shut
> down our Exchange services.  I have noticed a lot of messages from
> postmaster@xxxxxxxxxxxx in the Queues folder...and I mean a lot.  As a
> result our outbound email was slow getting to its destination.  I have
> deleted the postmaster messages to the fictional/spoofed domains and
> outbound email is now fine.
> 
> I have also noticed that the Queue is set to retry for 3 days...WOW this
> is crazy...what are your recommendations, 12 hours? 24 hour?  The people
> that set this up must have kept the defaults.  We run GFI v11 to block
> spam...so it is catching a lot of it but not all.
> 
> This issue shut down all exchange services and I had to reboot and get rid
> of the messages in the queues.
> 
> Help!
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
scott.clarke@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx


Other related posts: