Default SMTP virtual flooding? (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Server Security



Message

ymanana -> Default SMTP virtual flooding? (2.May2005 1:35:00 PM)

Hi,

I'd noticed that my server started generating increasing traffic: If I stop my default smtp virtual server, the traffic drop dead (or almost); if i restart it again it jumps off again to the my limit bandwidth.
I ran test to see if I were used as an open-relay and they cam out negative (tests according to "http://support.microsoft.com/?id=324958")

So, it really appears that there is aproblem or some1 or something is using my smtp.

Help, please...
YVes



semorefred -> RE: Default SMTP virtual flooding? (2.May2005 2:02:00 PM)

stop smtp service.
rename mailroot to mailroot.old
start smtp service.
it will auto create a new mailroot folder.

download stinger.exe and run it on the mailroot.old folder..



ymanana -> RE: Default SMTP virtual flooding? (2.May2005 2:10:00 PM)

Hi, thanx for the tip. Do i take it that you suspect that i have a worm or some viruses?

I'm yet to download stinger. Meanwhile i ran a full scan on the folder that i renamed, using NAV with the latest virus definition: and it didn't find anything.

I'll try the stinger, but failure of which, what other options?

Thanx...



ymanana -> RE: Default SMTP virtual flooding? (2.May2005 2:56:00 PM)

Hi I've run the stinger. Nothing wrongor detected.



cwillis -> RE: Default SMTP virtual flooding? (6.May2005 8:24:00 PM)

Change your smtp settings so it only accepts mail for actual users.

The default is to accept mail for any user@domain.com and send back ndr's to those it can't find.

check out the recipent filtering of the following article

http://www.msexchange.org/tutorials/Sender-Recipient-Filtering.html



Page: [1]