Is my server hijacked or is it spammed
- From: tony.newsgrps@xxxxxxxxx
- Date: 24 Jul 2006 15:26:15 -0700
Hi there,
I have some strange emails queued on my exchange server and I can't
figure out if someone if using my server to send spam or if he/she is
doing some sort of spam attack.
I believed my smtp server is configured properly (ie users from the
internet must first authenticate before they want to send email through
my server)
Yet, when I look at the smtp queue, I see a lot of emails pending.
All emails originate from the same fake user:
fakeName@MyPublicIPAddress and are sent to what appear unlikely
recipients: vv ss@xxxxxxx, jqy@xxxxxxxxxxxxxxx ... (note that I
slightly changes the domain names in cases these are real addresses).
Where do you think these emails are coming from? Is some one using my
exchange server to send spam or is it some sort of
postmaster@xxxxxxxxxx variation to be able to send me spams?
Any feedback greatly appreciated.
Bonus question (might be related): My exchange server seems to be
leaking memory.... It grows to 1.1GB of memory usage quickly yet we're
a very small organization ( 20 pple). Is it what I should be expecting?
Thank you,
Tony.
.
- Follow-Ups:
- Re: Is my server hijacked or is it spammed
- From: Bharat Suneja [MVP]
- Re: Is my server hijacked or is it spammed
- Prev by Date: Re: 2 FE and 3 BE Exchange 2000 upgrading to 2003 need guidance
- Next by Date: Re: Deleted Messages...
- Previous by thread: Re: OOF on upgraded server
- Next by thread: Re: Is my server hijacked or is it spammed
- Index(es):
Relevant Pages
|
|
