Postmaster@domain.com being sent in ESM SMTP Queue

[Seecke]

I have an issue that may be virus/spyware related.

In Exchange Management Console /Servers/(servername)/Protocols/Queue I see a lot of urls that I know aren't coming from the people in my company. For example there is '0733.com' that appears every once in a while with a small message in it. After enumerating, I can look at whom it is from and it says postmaster@(complete domain name).com with the subject hidden and to an email address that seems to be random letters before the @domain.com.

These 'postmaster' message can at times bog downt the server and cause our outbound emails to be delayed for a considerable amount of time. I have been monitoring the queue and manually deleting any outbound mail that is supposedly from the 'postmaster'

McAfee AV is up-to-date with the latest defs and engine.

What can be causing these eroneous urls to appear in the outbound queue and how can I stop this from happening?

 

[MitzysMan4Life]

this sounds like spam messages that are sending Non Deliverys to the original sender (which usually won't exist) so they stay in the queue

we use XWall to stop a lot of this junk - you can set it to check for addresses that don't exist in exchange and stop them at the gateway. Worth a look. Works great and it is inexpensive too.

 

[Seecke]

Cool, I will check that out!

Thanks