Re: queues problem Please help ASAP

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Ramadan Al-Jallad (ramadan19_at_hotmail.com)
Date: 07/11/04 

Date: Sun, 11 Jul 2004 12:16:57 +0200

And after I Know how to disable NDR in exch2k3 nothing new my queue seems to
be fixed and the outbound traffic from queues is very very weak but my
outbound traffic in my leased line connection is full
and the reason is exch2k3 beacuse when I make it off the oubound traffic
goes immediately down to the normal range.
is there a virus possiblity and this virus linked with certain exchange
server 2003 service.????
waiting for your reply
with my thanks to you.
"Ramadan Al-Jallad" <ramadan19@hotmail.com> wrote in message
news:OFr4z2xZEHA.2488@tk2msftngp13.phx.gbl...
>
> "Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
> news:0md1f0t497u8k5p9qe5sf454dbpjtl49j4@4ax.com...
> > "Ramadan Al-Jallad" <ramadan19@hotmail.com> wrote:
> >
> > >Dear All:
> > >I haave the follwing case :
> > >1-I have Exch2k3 on win2k server
> > >2-My exch2k3 is a secureNat client
> > >3-It is connected to the internal DNS and the internal DNS has a
> > >forwarders which are my ISP DNSs
> > >4-Exch2k3 is behind ISA2k
> > >5-There are publishing rules for the following services in ISA:
> > > DNS query for internal DNS
> > > server publishing for exch2k3
> > > OWA,OMA
> >
>........................................................................
> > >since one month all of things are Ok
> > >but befor 3 days strainge things were hapened
> > >when exch is ON my outbound connection is full(128kbps) As I can show
the
> > >outbound connection from telneting my router .
> > >and if it is OFF the connection traffic goes down
> > >and my outgoign messages are in the queues and slowly going down and
> reports
> > >of delay are generated to my users
> > >small emails are leaving the queue but with a dely
> > >I checked viruses by symantec corporate edition server and virueses are
> > >quarentin
> > >configure relay to be blocked from open relay
> > >when I add MSexchangeTransport to event viewer I get alot of events.
> > >the events are :
> > >The remote server did not respond to a connection attempt.
> > >and another one: Message delivery to the remote domain 'xxxxxx.com'
> failed
> > >for the following reason: Unable to bind to the destination server in
> DNS.
> > >also: Message delivery to the host ( ip address) failed while
> delivering
> > >to the remote domain 'finex.fi' for the following reason: The
connection
> > >was dropped by the remote host.
> > >
> > >I am realy in trouble so please help
> > >and thank you very much for any postive comments.
> >
> > Either you're being heavily spammed, you're being used in a "reverse
> > NDR" attack, or your server's an open SMTP relay.
>
> how can I know that by short way
> and How can I check the 2 possiblities
>
>
>
> >
> > You can eliminate the NDR's from spam by configuring the Exchange
> > server to use the AD to verify the address on the inbound mail is
> > correct. If it isn't, the mail isn't accepted.
>
> can you please show me how to make that.
>
> >
> > If it's a reverse-NDR attack you'll have to block the IP addresses of
> > the originator.
>
> How to make that?
>
>
>
> > If you're an open SMTP relay, close the relay.
>
> How to make that?
> >
> > A final possibility is that you've assigned a weak password to a
> > common account (administrator, iusr_<servername>, webmaster, etc.) and
> > someone's cracked the password. It can also be one of your user's
> > accounts that compromised. If you don;t nned it, don't allow relaying
> > by authenticated clients.
>
> I don't think so because we made a complexity requirement for passwords.
> thak you very much
> Hope to reply.
> >
> > --
> > Rich Matheisen
> > MCSE+I, Exchange MVP
> > MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
>
>

Relevant Pages

  • Re: AJAX devtool using Cobol
    ... managed by a Java Applet. ... Server Affinity is completely under ... just enter an asterix "*" for the Queue Name and then click ... Applet Java code is application-neutral and completely reusable. ...
    (comp.lang.cobol)
  • Re: best way to load arrays with large amounts of data?
    ... JavaScript - or at least soem thing mroe flaxible than lines and lines ... Server Affinity is completely under ... just enter an asterix "*" for the Queue Name and then click ... Full, one-time, context-specific, VMS User Authentication. ...
    (comp.lang.javascript)
  • Re: Need help urgently please!
    ... I'll create a back-up folder for the Queue and copy ... The backup was done around 2AM and the server crashed at 1:30PM. ... a significant amount of mail will be lost if we can't recover the logs. ... there is a significant amount of mail in the queue that arrived at our ...
    (microsoft.public.exchange2000.admin)
  • Re: Need help urgently please!
    ... I'll create a back-up folder for the Queue and copy ... The backup was done around 2AM and the server crashed at 1:30PM. ... a significant amount of mail will be lost if we can't recover the logs. ... there is a significant amount of mail in the queue that arrived at our ...
    (microsoft.public.exchange2000.admin)
  • Re: Need help urgently please!
    ... I'll create a back-up folder for the Queue and copy ... The backup was done around 2AM and the server crashed at 1:30PM. ... a significant amount of mail will be lost if we can't recover the logs. ... there is a significant amount of mail in the queue that arrived at our ...
    (microsoft.public.exchange2000.admin)