[THIN] Re: Exchange question
- From: "Ron Oglesby" <roglesby@xxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 4 Mar 2004 08:53:16 -0600
First off make sure you change the SMTP Virtual server's relay settings to
only allow your IP to relay.
Also once that is done look at the queues. Are they Chocked FULL or do you
just have a ton of empty ones? If they are a bunch with 0 messages they will
go away the ones with TONS of messages are awaiting delivery etc. Those you
can right click on the queue slect find messages, then hit the find button.
Delete them with no NDR.
NOW. If you have thousands of messages (I had a customer yesterday killing a
quad box with like 45,000 messages waiting to go outbound) you may need to
get a little more creative.
We change the Virtual server and all connectors to route to a smart host.
This smart host was a really a Windows 2000 box with IIS and SMTP on it. Now
we let all the messages dump right to it over several hours). Once the
queues were emptied we rest the connectors and virtual server. Then we just
stopped the SMTP service on the smart host and killed all the messages.
Microsoft would have you send it to a bogus smart host, then try to delete
everything in the queue. This would take more than several hours so our
little "method" was faster.
Ron Oglesby
Senior Technical Architect
Microsoft MVP - Windows Server
RapidApp, Chicago
Mobile 815 325-7618
Office 312 372-7188
e-mail roglesby@xxxxxxxxxxxx
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Philip Walley
Sent: Thursday, March 04, 2004 8:30 AM
To: Thin (E-mail)
Subject: [THIN] Exchange question
I have an exchange 2003 server that someone has obviously compromised. I
noticed in the msg queues that there were entries for domains that I didn't
know anything about. My questions are how do I delete the msg queues and
what can I do to prevent this from happening again?
Philip Walley
Sr. Network Engineer
Consultrix Technologies
Memphis, TN.
(901) 383-1300
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
