Smart questions
Smart answers
Smart people
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Tek-Tips
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.
Just copy and paste the
code below into your site.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site
Partner Button
(Download This Button Today!)

Feedback

"...Your site has saved me hours of work that I cannot begin to express my satisfaction..."

Geography

Where in the world do Tek-Tips members come from?
Woodworker4u (MIS)
13 Nov 09 10:19
All, I noticed our SBS 2003 root hard drive filling up rapidly over the past 2 months.  The SMTPSVC1 log files are very large.  I imported into excel to get an idea of how many entries and we are seeing an avg of 48,000 entries a day.  I am seeing names with our domain email address that do not belong to this company.  Does not seem to have errors but something does not seem correct.

Can anyone give me some assistance of where to start?

Thanks to everyone.
Michael
charlie2908 (IS/IT--Management)
4 Dec 09 12:33
Either you are a victim of spam or you have an open relay there.  
Woodworker4u (MIS)
4 Dec 09 14:31
Charlie, I am in agreement but I can't seem to find the open relay based on the normal process.   I have used the typical telnet process to determine and it was negative for an open relay.  Any thoughts would be appreciated.
Zelandakh (MIS)
14 Dec 09 17:01
Well turning off logging might be a plan - are those emails getting delivered or accepted and dropped?
charlie2908 (IS/IT--Management)
15 Dec 09 7:30
In IIS, configure your SMTP server to only allow connections from the local machine (127.0.0.1) and any other permitted servers.
Also run an AV update and do a full scan on the server for botnets and any other virus.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close