Chris
Thu Jan 15 18:51:25 CST 2004
Mark,
Okay, do you mean security logging in Windows via Local and domain security
policy right? I did not have that enabled, but have enabled it. You aren't
talking about a logging setting in Exchange, right?
I cleared the checkbox, but am still accumulating mail in the badmail
folder. I deleted them all (and yes it did take a while). Now I have 111
more, just in the span of a few minutes.
Thanks for the article from msexchange.org. Actually, I also followed the
directions (all except for clearing the checkbox, which I have now done.) I
have also followed the steps in Block Open SMTP Relaying and Clean up
Exchange Server SMTP Queues on SBS
(
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q324958&) under the
section Determine Whether the Exchange Server Is an Open Relay. According to
the response I got, it is not. This article also recommends to check the
box. Interesting.
When I ran the netstat -an command mentioned in the other article you
referred, I get the following:
TCP 0.0.0.0:25 0.0.0.0:0 LISTENING
UDP 10.10.10.253:2535 *:*
Obviously, nothing like he got. Following his steps in the article:
My guest account is not enabled.
I am not seeing anyone trying to get in.
I cant figure this out.
Chris
"Mark McDonald" <ueshibaau@nospammsn.com> wrote in message
news:%23uu6yR82DHA.1052@TK2MSFTNGP12.phx.gbl...
> Hi Chris,
>
> First of all, do you have security logging enabled? i.e logging logon and
> logoff events?
> In the SBS FAQ article it advises to CLEAR that checkbox and to be honest
I
> have always done that since this article came to light [Thanks goes to
Wayne
> for that]
>
> I have sent another link to assist you with the configuration of the SMTP
> virtual server, even though in the screen dumps it has the checkbox
ticked,
> clear it.
>
> If you do have 22,000 bad mails, then I think we have a problem here.
>
> You can clear your bad mail folder, but a word of caution, it may take a
> while for it open the folder with that many in there.
>
>
>
http://www.msexchange.org/tutorials/MF005.html
>
>
http://www.sbsfaq.com/news/getArticle.asp?MessageID=000000001A447390AA6611CD9BC800AA002FC45A0900E049B559A334DD479C5D360FB473600B0000000187180000F401C41B681A9640A459B27C5FF7E6840000B1E572030000&path=News
>
> "Chris Guimbellot" <cguimbellot@FORGETSPAM.hifranchise.com> wrote in
message
> news:e0poq2t2DHA.1264@TK2MSFTNGP11.phx.gbl...
> > Hello,
> >
> > SBS2K. When I look at the Queues node under SERVER > Protocols > SMTP >
> > Default SMTP Virtual Server > Queues, I get the following entries:
> >
> > hifranchise.com (Local delivery) Ready 0 0
> > PreSubmissionQueue (Messages pending submission) Ready 0 0
> > Messages awaiting directory lookup Ready 0 0
> > Messages waiting to be routed Ready 0 0
> > SmallBusiness SMTP connector - bounce.go2lnk.com (SMTP Connector -
Remote
> > delivery)
> > SmallBusiness SMTP connector - purchze3.com (SMTP Connector - Remote
> > delivery)
> > SmallBusiness SMTP connector - rebddte.com (SMTP Connector - Remote
> > delivery)
> > SmallBusiness SMTP connector - mx04.bargainheadquarters.com (SMTP
> > Connector - Remote delivery)
> > SmallBusiness SMTP connector - popggg.com (SMTP Connector - Remote
> delivery)
> > SmallBusiness SMTP connector - kindredkonnections.com (SMTP Connector -
> > Remote delivery)
> > SmallBusiness SMTP connector - ewbatzz.com (SMTP Connector - Remote
> > delivery)
> > SmallBusiness SMTP connector - practizze.com (SMTP Connector - Remote
> > delivery)
> > SmallBusiness SMTP connector - fastpowersendez.net (SMTP Connector -
> Remote
> > delivery)
> > SmallBusiness SMTP connector - msn.ca (SMTP Connector - Remote delivery)
> >
> > Anyway, I don't think I should have all these "SmallBusiness SMTP
> connector"
> > entries. At any given time, each of these entries, there are one to
three
> > messages are listed in the "Total Number of Msgs" column. Should I? I am
> not
> > really familiar with what the Queues node is actually for. I noticed
this
> > after I received a bunch of messages in my Inbox saying that messages we
> > undeliverable. I NEVER get these messages. I think that someone is using
> my
> > server to relay messages, but I'm not sure. Does my receiving these
> messages
> > have anything to do with relaying? And, do the entries in the Queues
node,
> > have anything to do with it?
> >
> > I appreciate the help. Thanks,
> >
> > Chris
> >
> >
>
>