RE: Why would sys admin send this out?????

  • From: "KEN MORRIS" <KMORRIS@xxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Fri, 19 Dec 2003 14:55:40 -0500

Not our server at all.......... Not even close. 
Yes we are blocking the relay hack. 
I can see the reply address concept happening. 
Checking the logs I found........... Nothing to indicate a problem in or
around that time. Nothing out of the ordinary. 
It ended up the mailbox of the account for the Monitoring and
Status/Notifications........... 

That account reporting query is set up for the following:

%TargetInstance.Name% has reported a %TargetInstance.ServerStateString%.
Reported status is:
Queues - %TargetInstance.QueuesStateString%
Drives - %TargetInstance.DisksStateString%
Services - %TargetInstance.ServicesStateString%
Memory - %TargetInstance.MemoryStateString%
CPU - %TargetInstance.CPUStateString%


Thanks

Ken

-----Original Message----- 
From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx] 
Sent: Friday, December 19, 2003 2:22 PM 
To: [ExchangeList] 
Subject: [exchangelist] RE: Why would sys admin send this out????? 

http://www.MSExchange.org/ 

motgate4.mot.com is your server? 

It's possible that they sent the message to a recipient (FTUHY@xxxxxxx) with
a reply-address of some_user@xxxxxxx and this is the NDR.  It has nowhere
else to send it, so the system administrator handles it (panic would be
another term).  

Who's inbox did it end up in? 
  

-----Original Message----- 
From: KEN MORRIS [mailto:KMORRIS@xxxxxxx] 
Sent: Friday, December 19, 2003 2:17 PM 
To: [ExchangeList] 
Subject: [exchangelist] Why would sys admin send this out????? 

http://www.MSExchange.org/ 

Hi Guys, 
I'm curious as to your thoughts on why we would receive the following: 

From: System Administrator 
Sent: Friday, December 19, 2003 11:07 AM 
To: ftuhy@xxxxxxx 
Subject: Undeliverable:this is amazing, great for guys 

Your message did not reach some or all of the intended recipients. 

      Subject:  this is amazing, great for guys 
      Sent:     12/19/2003 11:01 AM 

The following recipient(s) could not be reached: 

      ftuhy@xxxxxxx on 12/19/2003 11:07 AM 
            The e-mail account does not exist at the organization this
message was sent to.  Check the e-mail address, or contact the recipient
directly to find out the correct address.

            < motgate4.mot.com #5.1.1 SMTP; 550 5.1.1 <ftuhy@xxxxxxx>... 
User 
unknown> 

Is someone attempting to relay (once again?) ?? 
This is coming from the kpl.org email server, which is not configured for any
of the domains listed on this email. It IS configured to stop relaying and
this has been tested and confirmed...... So again I ask why? 

Thanks 
Ken 

------------------------------------------------------ 
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist 
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp 
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ 
Other Internet Software Marketing Sites: 
Leading Network Software Directory: http://www.serverfiles.com 
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:

http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
http://www.ntfaxfaq.com 
------------------------------------------------------ 

------------------------------------------------------ 
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist 
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp 
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ 
Other Internet Software Marketing Sites: 
Leading Network Software Directory: http://www.serverfiles.com 
No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com

------------------------------------------------------ 

Other related posts: