Results 1 to 5 of 5
  1. #1
    Lounger
    Join Date
    Jan 2002
    Posts
    26
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Exch 5.5 - Monitoring features?

    Hello all,
    I keep getting e-mails directed to my postmaster account from another postmaster at some other domain that is saying that I am sending an e-mail to an invalid address at their domain. Problem is that I've never heard of these people and I'm getting about 20 of these reject emails a day. How can I monitor what e-mails are going on of my Exchange server? What do most people use to keep watch over what's going in/out of their network? Any help would be GREATLY appreciated. Thanks!

  2. #2
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Exch 5.5 - Monitoring features?

    I can't answer your question, but doesn't the reply contain the message headers so you can identify the sender? If not, maybe the other postmaster needs to be more helpful. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

  3. #3
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Exch 5.5 - Monitoring features?

    could it be the yaha virus? if the server is listed as being (Exim) it probably is yaha...

    if not yaha, then klex or another virus is spoofing your domain.

    The NDR should have an attachment which can provide clues, but only open it it you feel the NDR is legit.

  4. #4
    Lounger
    Join Date
    Jan 2002
    Posts
    26
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Exch 5.5 - Monitoring features?

    Well, I am running antivirus that is picking up Klez, but it's deleting it before it has a chance to infect me. I did some testing and found that I was open to relaying, I'm guessing that was my problem. I closed relaying and tightened things down and the traffic seems to be much less. I would still like to find a good reporting/monitoring program without having to download/install/uninstall 15 different programs trying to find a good one, so any suggestions would be welcome. Thanks for all your help!

  5. #5
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Roanoke area, Virginia, USA
    Posts
    3,729
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Exch 5.5 - Monitoring features?

    You are probably NOT infected with Klez, but if you are getting a lot of them, you may be getting yaha too.

    It could be from an open relay or from a virus... as for monitoring, it really depends on what you want to do. We use only the tools that come with exchange server, mostly because we're blocked from reply, we have a good firewall and AV and content control software.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •