RE: Tracking down spam

  • From: "Mark Fugatt" <mark@xxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 5 May 2004 10:16:15 -0400

You could use Microsoft Network Monitor, and see who is generating all the
traffic to the server.

Mark Fugatt
MCSE, MCT, Microsoft Exchange MVP
Pentech Office Solutions Inc
Rochester, NY
Tel: 585 586 3890
Cell: 585 576 4750
http://www.4mcts.com
http://www.exchangetrainer.com

-----Original Message-----
From: Andy [mailto:andy@xxxxxxxxxxx] 
Sent: Wednesday, May 05, 2004 10:06 AM
To: [ExchangeList]
Subject: [exchangelist] Tracking down spam

http://www.MSExchange.org/

One of our customers seems to be sending out a lot of spam emails. The
firewall only allows the server to talk to the outside world via smtp and
having checked the server for viruses and relying, we think it is one of the
machines on the network sending email via outlook. Is there a clever way of
finding out which machine it is? (without resorting to turning all the
machines off 1 by 1)

I've tried increasing the logging on the smtp virtual server but that seems
to only show me where the emails are going to.

TIA

Andy

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------





Other related posts: