Possible Relay Behaviour? - SBS 2003 Premium Fully Patched

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

I have a site which is exhibiting some strange behaviour; there are
numerous messages originating from the postmaster@xxxxxxxxxxxxxxxx;
which are attempted to being sent to some very strange recipients.

I thought initially that the Exchange box was being used as a relay,
but it's in its default condition; I have tested with telnet and I get
the message that it is not possible to relay.

My next thought was a virus or trojan on either the server or a client
on the network, I have done full Trend passes across the SBS box and
all the clients and they are all clean.

I then cleaned up the SMTP queues and checked the BadMail folder which
was empty; I then turned on logging for MSExchangeTransport SMTP
Protocol to maximum and got some event id 7002 errors.

I am running out of ideas.

Has anyone else experienced this behaviour, and if so did you find
what the issues were?

Thanks,

Kev
.

Relevant Pages

  • Re: Possible Relay Behaviour? - SBS 2003 Premium Fully Patched
    ... numerous messages originating from the postmaster@xxxxxxxxxxxxxxxx; ... I thought initially that the Exchange box was being used as a relay, ... My next thought was a virus or trojan on either the server or a client ... I then cleaned up the SMTP queues and checked the BadMail folder which ...
    (microsoft.public.windows.server.sbs)
  • Re: Possible Relay Behaviour? - SBS 2003 Premium Fully Patched
    ... I have a site which is exhibiting some strange behaviour; ... numerous messages originating from the postmaster@xxxxxxxxxxxxxxxx; ... which are attempted to being sent to some very strange recipients. ... I then cleaned up the SMTP queues and checked the BadMail folder which ...
    (microsoft.public.windows.server.sbs)