Re: Que has over 150000 messages in it.



On Feb 23, 11:12 pm, atharsagri <atharsa...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:
frogman,

go tohttp://support.microsoft.com/?id=324958and follow the steps mentioned
in clean up the exchange server's smtp queues. Go step by step carefully.
It's a lengthy process but u will be able to clear the junk queues in your
server.

There is another way also if this is confusing you but it is very tiredsome
one.

Go to exchange system manager current sessions under default smtp virtual
server and right click and select terminate all. Do this frequently as and
when you see some junk sessions in this window.

Then go to the below window names Queues. Here you will see all your junk
queues. You have to select each queue line right click and select delete all
messages (no NDR). After deleting few entries just refresh the window and see
if it is deleting or not. You can also see the queue folder of exchange
server is reducing.

Regards,
Athar
MCSE+I

--
Athar Sagri



"frogm...@xxxxxxxxxxxxxx" wrote:
On Feb 22, 10:15 am, "frogm...@xxxxxxxxxxxxxx"
<frogm...@xxxxxxxxxxxxxx> wrote:
On Feb 21, 11:22 pm, atharsagri <atharsa...@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

Frogman,

go to this website as said by Markhttp://support.microsoft.com/?id=324958

then apply the diagonistic logging. It should give you the user who is
spreading the spam internally in your network. Once found the user, delete
the account.

I hope this will help u.
Regards,

--
Athar Sagri
MCSE+I

"frogm...@xxxxxxxxxxxxxx" wrote:
On Feb 21, 11:17 am, "Susan" <scon...@xxxxxxxxxxxxxxxxxxxx> wrote:
coming in from where? have you checked for a possible virus?

--
Susan Conkey [MVP]

<frogm...@xxxxxxxxxxxxxx> wrote in message

news:1172080863.228895.77720@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

here is what I am doing now
I got in this morning and unplugged the network cable from the server
and am starting to delete some of the messages in que. I have deleted
about 40000 so far but there is still more comming all the time. Will
this ever end. there should be no new ones comming in right? The
server is not connected to the internet so what is going on. Could
all these be in que somewhere on the server and need to be processed
untill all are deleted. Or is there something else going on?????- Hide quoted text -

- Show quoted text -

I am checking for viruses now
I have frozen all the ques and the one that is filling up is the
Messages pending submission.- Hide quoted text -

- Show quoted text -

i am getting warning and errors
here are some of them:
This is an SMTP protocol warning log for virtual server ID 1,
connection #139. The remote host "163.26.96.193", responded to the
SMTP command "rcpt" with "450 <yjc...@xxxxxxxxxxxxxxxx>: User unknown
in local recipient table ". The full command sent was "RCPT
TO:<yjc...@xxxxxxxxxxxxxxxx> ". This may cause the connection to
fail.

For more information, clickhttp://www.microsoft.com/contentredirect.asp.

---------------------------------------------------------------------------­­----------------------------------

This is an SMTP protocol error log for virtual server ID 1, connection
#141. The remote host "210.59.184.205", responded to the SMTP command
"rcpt" with "550 5.1.1 User unknown ". The full command sent was
"RCPT TO:<terry...@xxxxxxxx> ". This will probably cause the
connection to fail.

For more information, clickhttp://www.microsoft.com/contentredirect.asp.

---------------------------------------------------------------------------­­--------------------------------------

A non-delivery report with a status code of 5.3.5 was generated for
recipient rfc822;ppt11...@xxxxxxxxxxxxx (Message-ID
<SFADCSRV01PAwuw6Dt00000f...@xxxxxxxxxxxxxxxxxxxxx>).
Causes: A looping condition was detected. (The server is configured to
route mail back to itself). If you have multiple SMTP Virtual Servers
configured on your Exchange server, make sure they are defined by a
unique incoming port and that the outgoing SMTP port configuration is
valid to avoid looping between local virtual servers.
Solution: Check the configuration of the virtual serverÆs connectors
for loops and ensure each virtual server is defined by a unique
incoming port.

For more information, see Help and Support Center at

How do i find the account being used???- Hide quoted text -

- Show quoted text -

I followed the instructions on thehttp://support.microsoft.com/?id=324958
to the T this time and found i was open and closed that up
i am in the process of cleaning up the queues now and my event viewer
is still throughing the 7010 event.
i even check the telnet process again to confirm it was plugged. My
question is how long does it take to process all the ones already on
the server because i have deleted about 50000 so far.- Hide quoted text -

- Show quoted text


I cleaned out the queues on the hard drive and that seemed to stop all
the email from coming back.

.



Relevant Pages

  • [NT] Vulnerability in Exchange Server Could Allow Arbitrary Code Execution (MS03-046)
    ... Get your security news from a reliable source. ... In Exchange Server 5.5, a security vulnerability exists in the Internet ... an unauthenticated attacker to connect to the SMTP port on an Exchange ...
    (Securiteam)
  • RE: SMTP error (only from Outlook)
    ... This issue appeared on specify user or all SMTP clients? ... If yes, in Exchange System ... Is there any local bridgehead server listed in "Local ... to over three dozen open relay block lists. ...
    (microsoft.public.windows.server.sbs)
  • RE: strange email errors
    ... you to check the relay configuration on the SBS server. ... please restart the SMTP virtue server and Exchange ... Please also refer to the following steps to create a new SMTP Connector to ...
    (microsoft.public.windows.server.sbs)
  • RE: SMTP Application Error Question
    ... I noticed the Exchange Queue are filling up with Delivery Status Failure ... Exchange queues fill with many non-delivery reports from the postmaster ... account in Small Business Server 2003 ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange issues
    ... Are you up to date on all your Service Packs, both Windows and Exchange? ... > all traffic on port 25 to the SBS Exhange server. ... I suspected SMTP relaying becuase ... > You should verify that the server really isn't an open relay: ...
    (microsoft.public.exchange2000.admin)