Michael. I'm no exchange expert by any stretch of the imagination so here is the message tracking for one of the many spams.
Any ideas if maybe I need to turn on/up some tracking options? From: Michael B. Smith [mailto:mich...@owa.smithcons.com] Sent: Thursday, July 16, 2009 1:02 PM To: MS-Exchange Admin Issues Subject: RE: 2k3 message tracking message tracking should show you where a message originated. what did it give you for the message reference by spamcop? ________________________________ From: Glen Johnson [gjohn...@vhcc.edu] Sent: Thursday, July 16, 2009 8:52 AM To: MS-Exchange Admin Issues Subject: RE: 2k3 message tracking Followup. Anyone care to take a look at this report and help me figure out where it originated and how it got through our system? Vh-fs4 is our x-wall spam gateway in the report. Thanks in advance. Glen. http://www.spamcop.net/w3m?i=z4375098464z63297735500b0e4abee95f47f7adae8 2z From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Friday, July 10, 2009 10:28 PM To: MS-Exchange Admin Issues Subject: 2k3 message tracking I've looked in message tracking and also at the logs and cant find what I need. We have a client pc sending hundreds of spam emails through our exchange server. Nothing open directly from exchange to the internet except https for owa. Relaying is disabled except for 4 ips which are other servers. Anyway, we have frozen a ton of them in the SMTP queue and message tracking shows them but doesn't say where they originate. They originate from 2 different accounts and it is possible that both of these users have logged onto the same computer. Part time faculty and they all share several computers. Any suggestions appreciated.
<<image001.png>>
