[THIN] Re: OT: Exchange question
- From: "Claudio Rodrigues" <crodrigues@xxxxxxxxxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 4 Mar 2004 10:43:41 -0500
Exactly. What is probably happening is you are getting spammed on =
addresses that do not exist on your site (like =
bob_the_man@xxxxxxxxxxxxxxx). Exchange by default will return an NDR and =
if you are getting emails to these users that do not exist from tons of =
different domains, you will see TONS of queues with many messages on it.
Also the Badmail directory will start increasing like nuts. Make sure =
you empty it.
To avoid all these issues you have a couple ways:
1. Use a spam filter (many 3rd party available) but this usually means =
an extra machine that will receive the emails, filter and send to the =
Exchange box.
2. Use the smarthost trick as pointed by Ron. Works BUT you will need to =
do this probably every single day if the volume you are getting is high, =
what is a pain in the arse.
3. Disable NDRs at the Exchange. I know it breaks the RFC and bla bla =
bla but it is for sure the most effective way. :-)
Hope this helps,
Cl=E1udio Rodrigues
Microsoft MVP
Windows Technologies - Terminal Server
http://www.terminal-services.net
-----Original Message-----
From: Ryan Lambert [mailto:rlambert@xxxxxxxxxxxxxxx]=20
Sent: March 4, 2004 9:52 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: OT: Exchange question
Doesn't mean it's compromised.=3D20
Tested for open relay?
-----Original Message-----
From: Philip Walley [mailto:philip.walley@xxxxxxxxxxxxxx]=3D20
Sent: Thursday, March 04, 2004 9:30 AM
To: Thin (E-mail)
Subject: [THIN] Exchange question
I have an exchange 2003 server that someone has obviously compromised. I
noticed in the msg queues that there were entries for domains that I
didn't know anything about. My questions are how do I delete the msg
queues and what can I do to prevent this from happening again?=3D20
Philip Walley=3D20
Sr. Network Engineer=3D20
Consultrix Technologies=3D20
Memphis, TN.=3D20
(901) 383-1300=3D20
=3D20
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com=3D20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com=20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
