Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Weird Email Delivery

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Weird Email Delivery Page: [1]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
Weird Email Delivery - 2.Sep.2006 3:15:12 PM   
cjg4211

 

Posts: 5
Joined: 2.Sep.2006
Status: offline
I'm concerned about something that happened with one of my users this week. He sent a message to an internal Global Address List Distribution List he created in Outlook Contacts. Immediately after he sent the message, an Out of Office message arrived from an external email address of someone he does not know. We checked his Distribution List, and the recipient was not on list at all. I'm concerned that there's something up with the GAL on the Exchange server like a trojan or worm attacking the GAL or delivery queues. I'm going to check his computer more thoroughly today for viruses or trojans. Anybody have any ideas? Thanks.
Post #: 1
RE: Weird Email Delivery - 2.Sep.2006 3:38:38 PM   
a.grogan

 

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline
Is it possible that someone on his distribution list has configured a forwarding rule in Outlook to an external address - or - does one of the recipients on his distribution list have a forwarding address configured in AD?

Cheers

A


_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to cjg4211)
Post #: 2
RE: Weird Email Delivery - 2.Sep.2006 5:04:05 PM   
cjg4211

 

Posts: 5
Joined: 2.Sep.2006
Status: offline
I've checked AD, and no one has a forwarding address setup there. Since email was sent to only members of our firm's partnership and the email went out to a competing firm, it just seems highly unlikely that someone has a rule setup to forward the message.

(in reply to a.grogan)
Post #: 3
RE: Weird Email Delivery - 2.Sep.2006 5:24:16 PM   
a.grogan

 

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline
Hmmm - I agree, but you never know - how members are in the distribution list (e.g mailboxes) - you could a message track on all the members to see if it was forwarded by a rule.

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to cjg4211)
Post #: 4
RE: Weird Email Delivery - 2.Sep.2006 6:44:54 PM   
cjg4211

 

Posts: 5
Joined: 2.Sep.2006
Status: offline
OK, I've checked for the outgoing email address in the Message Tracking Center and did not find the outgoing message. I did find the incoming Out of Office response. Just to be sure the Message Tracking Center would detect an outgoing message to an outside domain, I checked for something I sent to a hotmail account that same day and found it in the MTC log.

CJG

(in reply to cjg4211)
Post #: 5
RE: Weird Email Delivery - 2.Sep.2006 6:57:35 PM   
a.grogan

 

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline
Hmmm - odd, no outgoing message to the person that sent back in the OOO - are you sure that the OOO reply was in response to the message that the person in question had sent? - e.g. coincidence (sorry for all the questions - just trying to eliminate possibilities)

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to cjg4211)
Post #: 6
RE: Weird Email Delivery - 2.Sep.2006 7:13:45 PM   
cjg4211

 

Posts: 5
Joined: 2.Sep.2006
Status: offline
The OOO reply was a response to a meeting request, and had the request's same subject line.

(in reply to a.grogan)
Post #: 7
RE: Weird Email Delivery - 2.Sep.2006 8:13:18 PM   
cjg4211

 

Posts: 5
Joined: 2.Sep.2006
Status: offline
Looks like I have found the answer. By using the Exchange Message Tracking Center (Exchange System Manager>(<Domain>)Exchange>Tools>Message Tracking Center), I found the forwarded message (it helps to spell the email address correctly). Thanks so much for your help and have a good evening!

CJG

(in reply to cjg4211)
Post #: 8
RE: Weird Email Delivery - 2.Sep.2006 8:18:49 PM   
a.grogan

 

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline
No problem, I am glad that I could help - you have a good evening as well.

Cheers,

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to cjg4211)
Post #: 9

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Weird Email Delivery Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts