originator = <>

[hboyd]

I hope someone can help. I checked the outgoing Queue on our Exchange 5.5 server and there are hundreds of messages with no originator queued up to go out. I assume that somehow something is sending out spam from this server.

Any idea where to start? Thank you.

 

[dennisbbb]

Look for the patch that fixes the NDR problem on Exchange. Basically if a spammer sends an email to your server to someone non-existent, your server will try to reply with NDR. But the reply address is bogus also. Your server will keep on trying until it times out in the queue.

 

[hboyd]

I'll look for the info you describe.

Just to confirm, these will show up in the queue continuously. Some of them are getting sent out... i know this because if I highlight one and then click details it will sometimes tell me that it has already been sent. I go in and delete hundreds of these at a time only to have them reappear. This has been going on for a few weeks as far as I know.

Thanks for your help.

 

[zbnet]

faq10-5018

 

[hboyd]

That sure looks like it! Thanks to both of you!

Bud

 

[bradiator]

so how would you solve the problem when the originator field displays only a "<>" symbol??? i already have sp 4 installed (with exchange 5.5) i've slowed it down, but it still comes up

 

[zbnet]

Have you actually bothered to read the FAQ? In SMTP, system-generated messages have a sender of <>, just in case they can't be delivered. All the non-delivery reports (NDRs) your system is generating are 'from' <>, so that they don't generate an endless loop if the system they're sent to can't deliver them (think about it).

 

[ChuckG]

Actually if you call Microsoft they'll give it to you for free.

Took me about a grand total of 10 minutes to get them to send it out. Just make sure you reference that Knowledge Base article number.

ChuckG

 

[fuego007]

Be sure to set the hexadecimal value to 1. The other settings aren't as effective.