Re: Outbound queues fill up

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Chad (chad_at_bksteam.com)
Date: 09/29/04 

Date: Wed, 29 Sep 2004 06:39:25 -0700

I agree that we are being hit by a spam/ndr attack.
However we have turned off NDR's on the server. We also
get the Netskyp virus on our server alot, against my best
efforts to keep the AV software up to date. So any
thoughts on why NDR's are still being sent and how we can
prevent the Netsky virus.

Thanks
Chad
>-----Original Message-----
>Hi,
>that happens if you get a lot of mails (SPAM) which are
addressed to non
>exitent mailboxes.
>you exchange tries to send the sender of these SPAMs
NDRs. But usually SPAM
>has faked Sender so
>the NDRs fill up your queue.
>Either you upgrade to Exchange 2003 or you install a
antispam solution which
>does a userlookup on incoming emals
>and rejects mails addressed to non existent mailboxes.
Check Aloaha and
>VAMSOFT. Both have a 30 day eval period.
>
>FH
>
>"Chad Holstead" <chad@bksteam.com> schrieb im Newsbeitrag
>news:03e001c4a5a2$855c9a20$a401280a@phx.gbl...
>> I have an exchange 2000 server running on Windows 2000
>> server. All are patched to latest level. We were
>> noticing hi volumes of mail in our queues. We cleaned
>> the queues, disconected our server from the network.
Ran
>> a virus scan, came back clean. At that point we had
>> about 4 queues, we left the server disconected for
about
>> 3 hours and when we came back the server had 491
queues.
>> This tells me that our server is infected with a virus
or
>> a trojan, I just can seem to find it. Any help would
be
>> greatly appreicated.
>>
>> Thanks in advance
>> Chad Holstead
>
>
>.
>

Relevant Pages

  • Re: Outbound email tracking?
    ... >> That should slow it down, if there were someone using your mail server... ... >>> D. You can block open relay and clean up the SMTP queues by referring to ... >>> attributed to this type of spam. ... >>> When you enable recipient filtering (if you are using SMTP for incoming ...
    (microsoft.public.windows.server.sbs)
  • Re: Outbound queues fill up
    ... But usually SPAM ... and rejects mails addressed to non existent mailboxes. ... > the queues, disconected our server from the network. ...
    (microsoft.public.exchange2000.general)
  • Problems understanding queues in Exchange 2003
    ... Then in the dead of night delete the queues. ... through the server. ... correspond to different email domains (ex. ... Is my server being used as a spam server to ...
    (microsoft.public.exchange.admin)
  • RE: Unsolicted E-mail
    ... It turned out that all the 'spam' messages in the ... was hacked and being used as a spam server with an open relay. ... I am now seeing weird things happen on this network and slow ... Looking at the queues mail is going out again under ...
    (microsoft.public.windows.server.sbs)
  • Re: Store.exe 100% Prozessorauslastung
    ... >deine Queues rein, ob da nicht jemand über deinen Server ... >Due to high frequency of spam, viruses and malware all e- ...
    (microsoft.public.de.german.exchange2000.general)