Question Locked

Spamming problem - Please advise!

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I suspect a couple of pc's on our network are sending out spam. Can anyone please tell me of a tool which I can use to scan for this type of thing? Our ip has now been balcklisted all over the show. Please can someone help me out here.

Thanks in advance!

7 replies

by colmgdonnelly

Hi sounds to me like you're exchange server is configured to open relay. This will basically cause your server to forward any spam that it encounters resulting in your server being responsible. Its quite easy to fix, what version of exchange are you using?

by dup.mark

We use Lotus Notes. I think software has manifested on some work stations and are sending spam from there. Is there a specific tool I could use to scan for this tyoe of software?

by colmgdonnelly

Your standard antivirus / antimalware security suites such as kaspersky or mcafee should pick this up. Most anti-spam filters included in these security suites will only scan inbound mails. If i were you id install a trial version of Kaspersky internet security suite from www.kaspersky.com and see if it finds anything.
Hope this helps

by frank

i've faced this sort of thing a few times and i've used wireshark to look for any smtp related traffic on the internal network. if you've got a machine spewing smtp traffic abnormally, this is the sniffer to use.

i hate the procedure of de-blacklisting my ip.

//frank

by dup.mark

I actually just realised that i have that. I will install it and see.

Thanks

by frank

yup, you'll definitely be able to track the smtp culprit as these trojans usually send every few seconds...it's insane!

good luck.

//frank

This discussion is closed to new replies.