How to find out which server is sending spam?
in [Microsoft Exchange]
|
From: microsyskl on 3 Mar 2010 11:40 question... is this a dynamic or static ip? I have been finding spamhaus and others are /have been flagging all dynamic ip blocks supplied from isp's. it may be that NO inside servers are sending spam in this case... "2Sweet" wrote: > MS Exchange 2003 is running on Windows 2003 Server Operating System. > All emails route throught the MS Exchange Sever, SMTP Gateway. I was > wondering whether can check from the MS Exchange Server? > > My network IP address was blocked by "xbl.spamhaus.org RBL database". I am > trying to find out which machine send spam mails. > > > "John Oliver, Jr. [MVP]" <jcoliverjr(a)hotmail.com> wrote in message > news:OlMnpOouKHA.812(a)TK2MSFTNGP06.phx.gbl... > > Well, your firewall may be able to tell you this information depending on > > what reporting features it has. You can also turn off SMTP on each server > > to see which one is causing the issue but a little more information on > > your setup would be helpful as this has nothing to do with Exchange > > Server, unless Exchange is installed on these Win 2003 Servers? > > > > -- > > John Oliver, Jr > > MCSE, MCT, CCNA > > Exchange MVP 2009 > > Microsoft Certified Partner > > > > > > "2Sweet" <chongcmw(a)hotmail.com> wrote in message > > news:uTKoaGouKHA.2436(a)TK2MSFTNGP04.phx.gbl... > >> I have some Windows 2003 servers that are using SMTP, port 25. I > >> suspected one of the server is sending spam mails. > >> > >> How to find out which server is sending out high volume spam mails? > > > > . >
From: John Oliver, Jr. [MVP] on 3 Mar 2010 21:44
All good suggestions from other posters. In addition I would download ExBPA and run it against your Exchange Servers. I would then look at your Firewall settings to see if it has some reporting/monitoring features so you can review your SMTP traffic outbound. You may have to contact the Firewall vendor or review their support site to enable this. -- John Oliver, Jr MCSE, MCT, CCNA Exchange MVP 2009 Microsoft Certified Partner "John Oliver, Jr. [MVP]" <jcoliverjr(a)hotmail.com> wrote in message news:OlMnpOouKHA.812(a)TK2MSFTNGP06.phx.gbl... > Well, your firewall may be able to tell you this information depending on > what reporting features it has. You can also turn off SMTP on each server > to see which one is causing the issue but a little more information on > your setup would be helpful as this has nothing to do with Exchange > Server, unless Exchange is installed on these Win 2003 Servers? > > -- > John Oliver, Jr > MCSE, MCT, CCNA > Exchange MVP 2009 > Microsoft Certified Partner > > > "2Sweet" <chongcmw(a)hotmail.com> wrote in message > news:uTKoaGouKHA.2436(a)TK2MSFTNGP04.phx.gbl... >> I have some Windows 2003 servers that are using SMTP, port 25. I >> suspected one of the server is sending spam mails. >> >> How to find out which server is sending out high volume spam mails? > |