+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
General Chat Thread, Exchange mailserver queue is in the 1000s? in General; Cant remember the last time I looked at the queue, but our mailserver is showing thousands of messages in the ...
  1. #1
    Jake's Avatar
    Join Date
    Jan 2006
    Location
    Sunny South Coast
    Posts
    954
    Thank Post
    11
    Thanked 12 Times in 10 Posts
    Rep Power
    21

    Exchange mailserver queue is in the 1000s?

    Cant remember the last time I looked at the queue, but our mailserver is showing thousands of messages in the queue. Looking at the SMTP connectors, it seems we have hundreds upon hundreds of connections from all kinds of asian places and taiwanese and what not.

    It almost looks as if we are being used as a relay for spam, though I was sure we were all nicely configured to prevent that. Anyone seen something similar?

  2. #2

    Join Date
    Jan 2007
    Location
    Birmingham
    Posts
    807
    Thank Post
    29
    Thanked 36 Times in 24 Posts
    Rep Power
    26

    Re: Exchange mailserver queue is in the 1000s?

    Which queue are they in?
    Have you set up intelligent message filtering?

  3. #3

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,787
    Thank Post
    572
    Thanked 2,154 Times in 982 Posts
    Blog Entries
    23
    Rep Power
    626

    Re: Exchange mailserver queue is in the 1000s?

    You server is compromised to hell!!! Click 'Diable outbound mail' immediatly and dig into KB is my quick answer. You are not being used as a relay, but as a source of spam!!
    Is it on a global IP?

  4. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Exchange mailserver queue is in the 1000s?

    It's a spam attack on your server. Either by brute force or dictionary based. We have a Linux box as a front end mail server to deal with such things. Exchange is dreadful at coping with them. It's also very easy to make a mistake with the configuration, causing you to be an open relay.

  5. #5
    Jake's Avatar
    Join Date
    Jan 2006
    Location
    Sunny South Coast
    Posts
    954
    Thank Post
    11
    Thanked 12 Times in 10 Posts
    Rep Power
    21

    Re: Exchange mailserver queue is in the 1000s?

    Yeah been fiddling with it a bit, from what I have read it appears to be a "SMTP Auth" attack, somehow one of our users details have been comprised and those details are now being used to authenticate against our server for relaying mail. We were configured to prevent unauthenticated relaying, but not for relaying via "legitimate" authentication.

    I have implemented a few procedures I found at msexchange.org and so far it seems to be doing the trick

  6. #6
    Disease's Avatar
    Join Date
    Jan 2006
    Posts
    1,079
    Thank Post
    116
    Thanked 70 Times in 48 Posts
    Rep Power
    56

    Re: Exchange mailserver queue is in the 1000s?

    The server is not comprimised, its just relaying spam.

  7. #7

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,787
    Thank Post
    572
    Thanked 2,154 Times in 982 Posts
    Blog Entries
    23
    Rep Power
    626

    Re: Exchange mailserver queue is in the 1000s?

    You can't setup Exchange connectors without compromising and directly controlling the machine.

  8. #8
    Jake's Avatar
    Join Date
    Jan 2006
    Location
    Sunny South Coast
    Posts
    954
    Thank Post
    11
    Thanked 12 Times in 10 Posts
    Rep Power
    21

    Re: Exchange mailserver queue is in the 1000s?

    Thats my fault, I worded the original post poorly, I didnt mean actual connectors, I meant the connections list in the queue.

    Personally I blame a lack of female cybertechbabe today

  9. #9

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,400
    Thank Post
    636
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Exchange mailserver queue is in the 1000s?

    You could always blame Microsoft's poor-quality product

  10. #10

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Exchange mailserver queue is in the 1000s?

    If your using SMTP AUTH (or any internet facing service) you need to make sure you users use hard to guess/brute force complex passwords and change them regularly.

  11. #11
    Jake's Avatar
    Join Date
    Jan 2006
    Location
    Sunny South Coast
    Posts
    954
    Thank Post
    11
    Thanked 12 Times in 10 Posts
    Rep Power
    21

    Re: Exchange mailserver queue is in the 1000s?

    That would be lovely, sadly our teachers can barely remember a password like "apple" , let alone something as complex as something alphanumeric. Sometimes they even forget their usernames, (first initial + surname) !!

  12. #12

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Exchange mailserver queue is in the 1000s?

    Then you will be in this situation repeatedly.

  13. #13

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,400
    Thank Post
    636
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Exchange mailserver queue is in the 1000s?

    Can't you restrict SMTP to internal IPs only?

  14. #14

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Exchange mailserver queue is in the 1000s?

    @Jake

    Just unsubscribe from the "Pictures of Hot IT Chicks " newsletter and queues will drop down to the normal level

  15. #15

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,400
    Thank Post
    636
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Exchange mailserver queue is in the 1000s?

    I didn't know hwpr0n had a mailing list :shock:

    (That'll keep 'im going

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. New mailserver on Ubuntu 6.06LTS
    By NorbertBroadsword in forum *nix
    Replies: 6
    Last Post: 22nd November 2007, 02:31 PM
  2. Replies: 6
    Last Post: 5th July 2007, 03:45 PM
  3. Printer Queue - stalled job killer
    By contink in forum Scripts
    Replies: 9
    Last Post: 16th April 2007, 07:57 PM
  4. Replies: 10
    Last Post: 19th December 2006, 09:42 AM
  5. Printer queue control for teachers
    By NetworkGeezer in forum How do you do....it?
    Replies: 11
    Last Post: 17th May 2006, 04:30 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •