Re: my exchange 2007 is spaming, spam sender is postmaster

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

There is a good chance you are sending NDRs in response to incoming spam.
Try enabling recipient filtering to block emails addressed to invalid
recipients

In this manner emails will be rejected immediately without generating an
NDR.

You can only do this if Exchange is receiving internet email directly.

If you have the Ex2007 Edge Transport go to:
Microsoft Exchange | Edge Transport | Anti-Spam

Otherwise for Ex2007 Hub Transport install the anti-spam agents:
http://support.microsoft.com/kb/555924
Next go to:
Microsoft Exchange | Organization Configuration | Hub Transport | Anti-Spam

Open the properties for Recipient Filtering and tick the checkbox:
'Block messages sent to recipients not listed in the Global Address List'





--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"Frane" <frane.borozan@gmail. remove com> wrote in message
news:m6m2vzjuelov.vvkzywks8p03$.dlg@xxxxxxxxxxxxx
Hello,

I have exchange 2007 sp1 installed and today I have noticed that it is
sending spam. It is sending around 100 spam messages per hour.
SMTP auth is enabled and it is not possible to connect from outside.
My users are using exchange RPC over HTTP and OWA, I am not sure if
somebody is using pop3, but if they are it is rare <5 users.

Sender address is my domain postmaster ( I have disabled this mailbox and
deleted user postmaster, but server is still sending spam).
How I can detect who or what is spaming through my server and stop that?

Thank you



--
____________________________________
Frane Borozan
Terminal Services and Citrix Presentation Server user logging
http://www.terminalserviceslog.com


.

Relevant Pages

  • RE: OMA and Outgoing Spam
    ... Someone hacked a user account and use it to spam emails; ... Your Exchange server is open relaying emails;(You have checked it ... Your server is under RNDR Attack. ... When you enable recipient filtering on the SMTP virtual server, ...
    (microsoft.public.windows.server.sbs)
  • Re: Hundreds of domains in message queue/Cant delete queues
    ... the domain queues should eventually go away. ... System messages are messages from the Exchange or Windows 2000 or 2003 ... 2003 has a feature called "Recipient Filtering" which would block the ... > these emails, then deleting them, should the domain queues ...
    (microsoft.public.exchange2000.protocols)
  • Re: Outbound email tracking?
    ... the outbound emails on the SBS Server. ... How to Enable Message Tracking in Exchange 2000 Server ... You may refer to the following information to protect Exchange: ... When you enable recipient filtering (if you are using SMTP for incoming ...
    (microsoft.public.windows.server.sbs)
  • Re: Need some help with spam / Virus
    ... My ISP is using spam filtering Mostly black lists that are published. ... my email is sent to a general mail box that resides on their server. ... Exchange 2003 does not have the ability to pull pop3 accounts to the ... What is bothering me is I am not sure if the emails that I am getting are ...
    (microsoft.public.exchange.admin)
  • Re: Excess email from Exchange Administrator
    ... emails: 1) Using POP3 Connector to retrieve emails from the ISP mailboxes ... These incoming emails are directly delivered to the Exchange Server via ... Exchange?2003 supports recipient filtering. ... or e-mail messages that are addressed to recipients who are ...
    (microsoft.public.windows.server.sbs)