Unknown emails
- From: "itnewbie via WinServerKB.com" <u23362@uwe>
- Date: Fri, 17 Nov 2006 13:40:04 GMT
I just recently checked my queue on my exchange server 2003 and I am seeing
email's going out to unknown domains. I know that it is not someone from
inside the company sending out the emails. I also noticed that there are alot
of other emails tying to go out with the postmaster return address. I have
checked and there is not unathorized access. I have seen some errors in my
security log file (i.e. below). Can someone please give me some advise to see
how I can stop this?
Source Event ID Last Occurrence Total Occurrences
Security 529 11/16/2006 11:12 PM 133 *
Logon Failure:
Reason: Unknown user name or bad password
User Name: guest
Domain: SERVER-HAN***
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: SERVER-HAN***
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 66.122.129.50
Source Port: 0
--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/microsoft-exchange/200611/1
.
- Prev by Date: Re: Indexing uses *lots* of memory
- Next by Date: Re: How to remove user names from expired exchange 2000 domain
- Previous by thread: How to remove user names from expired exchange 2000 domain
- Next by thread: can't send to a certain domain
- Index(es):