Discussion Locked

Stopping outgoing spam

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Exchange 5.5 sp4 server. When I look at the outgoing mail queue I see a lot of mail tring to leave the server with no orginator, so that makes me think it is a infected users PC sending spam out.

HOw can I track down what PC is sending this email, so I can clean it up?

5 replies

by p.j.hutchison

First, I suggest locking down SMTP (IMS) so that only authenticated users can send out mail.
Also, you can limit the number of recipients per message to restrict mass mails.

by courtney

I think I am already half way there.I do have locking down SMTP (IMS) so that only authenticated users can send out mail, but the queues just sit there.

It looks like it is blocking. Emails are not going out (when they are spam) but they just sit in queue.

Is there away I can say delete email if it is not authenticted.

by fat chink

These Spam emails in your queue are 'bounces'. They are spam which is trying to be bounced back to the 'supposed' originating email address.

This is quite common. Getting rid of the problem is much harder. As long as you know the messages to be spam, just delete them all.

You should also install AntiSpam software on the Exchange server. Hopefully one with a setting to auto-delete bounced spam.

Good software will allow you to create a dummy mailbox and put all Spam into it for further review and training of the AntiSpam software.

This discussion is closed to new replies.