I do not have that ruled out...to be honest that is what I am thinking. When I check the "Current Sessions" of our Exchange Server SMTP Virtual Server I see someone there connected for more than 5 minutes...is this normal. Also, how can I track down the culprit if the above isn't a threat???? -----Original Message----- From: Dan [mailto:dan_erelis@xxxxxxxxxxxx] Sent: Friday, June 11, 2004 3:20 PM To: [ExchangeList] Subject: [exchangelist] RE: Exchange slow sending outbound messages http://www.MSExchange.org/ Have you ruled out Virus activity? if not I suggest turning on SMTP logging (if not already on) for you SMTP gateway and look for suspect IPs, IE an ip of a workstation talking to your gateway, this should not be unless that machine has a need or design to do so. They shouldn't be hard to find, indicitive of a virus launching its own SMTP engine and pounding out messages from a legit IP address on your internal subnet. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: scott.clarke@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
