Exchange Server Forums

messages in queues

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> messages in queues

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

messages in queues - 25.Sep.2006 12:00:14 PM

xxxomxxx

Posts: 3
Joined: 28.Feb.2005
From: ch
Status: offline

hi

I am getting approx 4-9 queues with 10-30 messages that come from administrator@ourdomain.ch to deliver a NDR

i looked up the messages and the body contains a mesage within a message.. the sender i am tracing it to is

dmifj@media.pl aka Fish
or @magentaprodotti13.com

mostly different are contents:
Message Name: Frog
Content:bogus
Attachment:CrewWord.gif

it seems to be a kind of worm. We are actually protected well, do not show up on any relay list or anything, and i dont think any messages are sent through the server that shouldnt be...

is this normal to have queues like this? Funny thing is, we have GFI & SAV on the server, so worms and alike should show up and give a message to the admin, but these seem to originate form the system itselves or a spammer that is hijacking our system...

if messages really are sent through our server, i am unlikely to catch them, since the queues would empty themselves quickly enough to show up empty

how can i monitor these events..

< Message edited by xxxomxxx -- 25.Sep.2006 1:02:24 PM >

Post #: 1

Featured Links*

RE: messages in queues - 25.Sep.2006 3:55:40 PM

mark@mvps.org

Posts: 3790
Joined: 9.Jun.2004
From: Philadelphia PA
Status: offline

You should know if it's a worm or not. Check your anti virus and anti spam. If stuff is coming in you should probably check with the vendors instructions to make sure all is well.

Also, see http://support.microsoft.com/?kbid=842851 to help you slow this kind of stuff down, especially stopping bothering with the whole NDR thing which I find to be a pointless exercise having these days.

_____________________________

Mark Arnold (Exchange MVP)
List Moderator

(in reply to xxxomxxx)