RE: Information store keeps stopping with error

2001-12-10 Thread Bruce Harrison

I can't add much to the solution here, but could I add a tag on question
concerning corrupt messages in the Information Store. I have a corrupt
message which is causing a failed status on my backups each evening. Usually
I just have the user delete the corrupted message and life goes on. I'd like
to get to the bottom of what corrupts a message and how I can recover it
from its corrupted state. I will read the articles below but I notice you
said they were about the IMC. 

Restate: How can I repair a corrupted message in the IS?

-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 10, 2001 9:13 AM
To: MS-Exchange Admin Issues
Subject: RE: Information store keeps stopping with error


Probably a malformed message.  How did you remove it before?  Did you toast
the queue.dat as well?

Consider following the steps for removing a corrupt message from the imcdata
queue:
http://support.microsoft.com/support/kb/articles/Q293/2/88.ASP
http://support.microsoft.com/default.aspx?scid=kb;FR;q169223
http://support.microsoft.com/support/kb/articles/Q232/2/79.ASP

Then look at applying sp4 :o)

William


-Original Message-
From: John Stevens
To: MS-Exchange Admin Issues
Sent: 12/10/01 5:45 AM
Subject: Re: Information store keeps stopping with error

I have looked back in the event viewer and here is the following.
When we try to start the information store after about 5 minutes it 
appears with the Dr watsons error event ID 4097 and then just switches
between 
event ID 4182  3039
 
Event ID - 4097, Source - Dr Watson, Type - Information, Cat  - None
The application, exe\store.dbg, generated an application error The error
occurred on 12/ 9/2001 @ 19:53:29.687 The exception generated was
c005
at address 77f65141 (RtlFreeHeap)
 
Event ID - 4182,  Source - MSExchange IMC,  Type - Error,  Cat  -
Internal
Processing
An error was returned from the messaging software the Internet Mail
Service
uses to process messages on the Microsoft Exchange Server.  As a result,
the
message in spool file YLQ4ZRZ9 will be retried when the server is
restarted.
 
Event ID - 3039,  Source - MSExchange IMC,  Type - Warning,  Cat  -
Internal
Processing
The error 0x80040115 was encountered while trying to communicate with
the
message store. An attempt to refresh the connection will be made.  If
not
successful, the service will be shut down.
 
Event ID - 1005,  Source - MSExchange SA,  Type - Error,  Cat  -
Monitoring
Unexpected error 0xc004 - The Microsoft Exchange Server computer
is
not available. Either there are network problems or the Microsoft
Exchange
Server computer is down for maintenance. Microsoft Exchange Server
Information Store ID no: 8004011d-0526- occurred.
 
Event ID - 4116,  Source - MSExchange IMC,  Type - Error,  Cat  -
Internal
Processing
An error was returned from the messaging software the Internet Mail
Service
uses to process messages on the Microsoft Exchange Server. It is
possible
that the piece of mail being processed at the time will be returned to
the
sender as a failed delivery instead of being delivered. The message will
be
moved to the BAD folder, if possible, and the error is not a temporary
error. Otherwise it will be retried when the service is restarted. Use
the
appropriate utilities found in the SUPPORT directory of your Exchange CD
to
view and manipulate messages that have been moved to the BAD folder
 
Event ID - 4094,  Source - MSExchange IMC,  Type - Error,  Cat  -
Internal
Processing
The error 0x8004011d occurred while trying to refresh network
connections to
the Information Store. The Internet Mail Service is being shut down.
 
Event ID - 4102,  Source - MSExchange IMC,  Type - Error,  Cat  -
Internal
Processing
A serious error has occurred while trying to send mail into the Exchange
Information Store. The
Internet Mail Service is being shut down.

- Original Message - 
From: Lefkovics, William   mailto:[EMAIL PROTECTED]
[EMAIL PROTECTED]
To: MS-Exchange Admin Issues 
mailto:[EMAIL PROTECTED]
[EMAIL PROTECTED]
Sent: Monday, December 10, 2001 1:29 PM
Subject: RE: Information store keeps stopping with error


 Hi John
 
 1) what is reported in the application event log? (always the first
place to
 look) 
 
 2) there are many post-sp3 (and post sp4 probably) fixes pertaining to
 store.exe.  Perhaps sp4 is a good idea?
 
 William Lefkovics, MCSE, A+, ExchangeMVP
 
 
 
 -Original Message-
 From: John Stevens
 To: MS-Exchange Admin Issues
 Sent: 12/10/01 3:21 AM
 Subject: Information store keeps stopping with error
 
 Someone please help
 
 We have Exchange server 5.5 sp3
 
 Our Information keeps stopping and creating files in the 
 IMCDATA / IN folder 
 YT5TW***
 
 We delete them and try to start the Information store back up
 and 2 minutes later it does the same thing.
 
 An error message appears
 An application error has occurred and an application error log is
being 
 generated. 
 Store.exe
 Exceptoin:access violation 

RE: Characters being moved in messages

2001-12-10 Thread Bruce Harrison
Title: Message



martS 
lecka! ou'lly tarts a ewn ersionv fo igp atinl.

  -Original Message-From: Lefkovics, William 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, December 10, 2001 
  2:11 PMTo: MS-Exchange Admin IssuesSubject: RE: 
  Characters being moved in messages
  I've 
  evern eardh of this.
  
  illiamW
  
  -Original Message-From: Simon Sculthorp 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, December 10, 2001 
  11:11 AMTo: MS-Exchange Admin IssuesSubject: Characters 
  being moved in messages
  Hi,
  
  Exchange 5.5 
  server running SP4. Clients are OL98, OL2000, OL2002 and Outlook 
  Express.
  Has anybody else 
  seen messages that have characters moved around. Generally this tends to be 
  the first letter of a word tacked on to the back of the last 
  word.
  
  It only happens 
  intermittently to about four users, out of a client base of about 500. One of 
  these users also intermittently gets a whole line that changes colour to lime 
  green after he sends it out!
  
  It only happens on 
  mail send externally and in HTML and seems to follow these users. We use 
  MailSweeper to scan for viruses and we have a third party, MesageLabs, that 
  scansour mail for viruses, Spam and Pornography. We've changed their 
  profiles several times.
  
  I've got a call 
  open with Microsoft, but we don't seem to be getting very far. I wondered if 
  anybody out there had come across something similar before these users drive 
  me nuts.
  
  Any help 
  gratefully accepted.
  
  List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: Client not receiving email from us but can from any other sit e

2001-12-07 Thread Bruce Harrison

Very possibly your server is configured as an open relay and spammers have
used it to send spam. You then get blacklisted by blackhole site
outputs.orbz.org. Go to www.orbz.org, go the section test this IP and you
can see if you are blacklisted by any of the major spam cops. Then it takes
a day or two to get removed from the blacklist after you have shut down the
open relay.

-Original Message-
From: Mathews, James E. [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 07, 2001 2:51 PM
To: MS-Exchange Admin Issues
Subject: Client not receiving email from us but can from any other site


Exchange 5.5... Outlook 2k client

We are trying to send email to one of our clients.  they can send to us
without problem.  I can send to them from an external email address (yahoo)
with no problem.  After we send messages we do not receive a undeliverable
reply.

Here is my thoughts let me know if you guys have any idea.  Since we do not
get a undeliverable reply it appears that the email is going someplace.  any
email I send to their name does not get bounced back.  example if I send to
[EMAIL PROTECTED] (don't want to use their email address hope you don't mind)
I receive no undeliverable message.  if I send to any other email address
that is wrong I get a bounce back.  if I send to a yahoo account that does
not exist it bounces it back.We are on a sprint network so I though
maybe sprint is not able to resolve their name correctly so I called sprint
had them send an email and it go through fine.  so I have no idea what the
problem could be. Please help.

Thanks 
James

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Upgrading

2001-12-05 Thread Bruce Harrison

If it stalls more than 10 minutes, yes, you are hung. You may be able to
restart the installation, but it is a good thing you have a backup.

-Original Message-
From: John Riley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 05, 2001 8:39 AM
To: MS-Exchange Admin Issues
Subject: Upgrading


Greetings all,

I am currently attempting to upgrade our current mailserver--MSExchange
4.0--SP2 to MS Exchange 5.5.  I have manuals etc. and thought all was
going well.  The process started and I could see the progress going
through its routine.  Currently, the screen has a white background and a
blue box where before I could see the installation progress percentage
completed information and cursor is now the famous hour glass--like the
installation has stalled.  My question to you all--is this normal or has
the installation indeed stalled?  The server OS is NT4.0 SP6.

I do have the systemed backup up, but hope I don't need to use it.

A prompt response would be appreciated.

JRiley

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: W32.Aliz.Worm..Help

2001-12-05 Thread Bruce Harrison

I just carried out this procedure yesterday since I am now managing an
Exchange server 5.5 that did not have any file extensions being blocked. I
used the articles below to block all .scr 's and it is working great. The
user gets a message that the attachment was quarantined because the file
type is not allowed. I need to finish blocking all the other nasty types
that have been suggested by the group.

-Original Message-
From: Bob Fronk (BTR Technologies, Inc) [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 05, 2001 9:31 AM
To: MS-Exchange Admin Issues
Subject: RE: W32.Aliz.Worm..Help


Valencia,

You must configure exclusions in Norton AV to have NAV and NAV EX on the
same server.

I had a similar problem way back when I love you hit.

Search Symantec's knowledge base  

http://www.symantec.com/techsupp/enterprise/

for the following articles:

1999041511561848  and 1998102611314548


I hope this helps.

Bob Fronk, MCSE 
President / Network Engineer / Consultant
BTR Technologies, Inc.
Email: [EMAIL PROTECTED] 
 




-Original Message-
From: Dawson, Valencia [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 8:39 AM
To: MS-Exchange Admin Issues
Subject: W32.Aliz.Worm..Help

We have Norton Anti-Virus 5.0 installed on the Exchange 5.5 Server, as
well
as Norton Antivirus for Microsoft Exchange.
When viruses come it is picked up and NAV for Microsoft Exchange keeps
the
statistics of who gets the virus, what virus and from whom.
What has been happening for a week now is that NAV picks up the W32.Aliz
virus and it is not picked up by NAV for Microsoft Exchange.
I want to block who this virus is coming from because in one day the NAV
might pick up thousands of this virus and this create a great load on
the
server.
I have tried several ways to try to determine what the problem is to
block
it and I am now at a loss, because the NAV on the server is still
picking up
the virus, whereas all the others viruses are being picked up by the NAV
for
Microsoft Exchange.
Can't find anything on Microsoft or Symantec to help.
Any help will be appreciated.
Thanks

Valencia Dawson
Asst. Project Leader
Network Systems


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: exchange on a DC

2001-12-05 Thread Bruce Harrison
Title: Message



Which 
part, Michael? The one-button restore or the part about restoring exchange to a 
recovery server?

  -Original Message-From: MHR(Michael Ross) 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 05, 2001 9:34 
  AMTo: MS-Exchange Admin IssuesSubject: RE: exchange on a 
  DC
  got 
  info on exactly how to do that?
  

-Original Message-From: Bruce Harrison 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 
05, 2001 8:31 AMTo: MS-Exchange Admin IssuesSubject: 
RE: exchange on a DC
Backup Exec has this kind of feature. You can carry 
out a full "image" backup called a "One button DR", then when disaster 
strikes you can actually boot from the tape and restore the entire hard 
drive. If you are a one-server shop, you have to be careful about your 
domain SID when disaster strikes, although I have heard there is some 
utility somewhere ? that will allow you to restore your Exchange server to a 
recovery server even if the recovery server has a different name. Anyone 
have a line on this utility?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, 
  December 05, 2001 9:18 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: exchange on a DC
  I believe that if Exchange is youronly DC (it is the PDC) you 
  are going to be hurtin for certain if you need to do a server recovery, 
  unless you have backup software that lets you boot from a CD and restore 
  the entire server as an single "image".
  
-Original Message-From: Benjamin Zachary 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, December 
04, 2001 6:20 PMTo: MS-Exchange Admin 
IssuesSubject: RE: exchange on a DC
Same here as well. We consult/manage many 10-100 user shops which 
many only have 1 or 2 servers. Typically the second server is dedicated 
for SQL or TS as their 'app' server and the other server houses 
everything else, file and print, DC and exchange. Heck I have a 80 user 
server running raid1/raid5 with exchange and 16 port fax modems for fax 
blasting heh.. the box runs like a champ its only a dual 600 with 1gig 
ram

  
  -Original Message-From: Ellery 
  July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 
  2001 6:17 PMTo: MS-Exchange Admin IssuesSubject: 
  RE: exchange on a DC
  Actually it is done more often then not in the places I visit. 
  Of course I visit a lot of 10-50 person shops running SBS or have only 
  two servers. I do not know for sure but would be will to bet that more 
  window2000AD/ exchange 2000 setup are running on the same box then 
  not. I run AD on its own box and most people think see that as 
  extravagant.
  
  ellery
  
-Original Message-From: Don Ely 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, December 
04, 2001 10:47 AMTo: MS-Exchange Admin 
IssuesSubject: RE: exchange on a DC
Sure it's "OK", it's not standard practice, but it's 
OK. I don't always follow MS's directions either. If it 
works in your environment, then cool. 

Personally, from the sounds of it, you have a multitude of 
servers at each site. That said, I would have to wonder why 
you'd put exchange on a DC. If I've got hardware to work with, 
I much prefer to put application servers on stand-alone 
servers. Saves the resources for the applications 
instead.

D



  
  -Original 
  Message-From: MHR(Michael Ross) 
  [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 
  2001 8:42 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: exchange on a 
DC
  But, you dont see an actual problem?
  I know MS says to run them seperate, and I think that is 
  only so you can say.. Im rebooting Exchange, and AD isnt 
  affected..
  but you have multiple DCs at each site, 1 being the mail 
  server, you should be ok...right?
  

-Original 
Message-From: Don Ely 
[mailto:[EMAIL PROTECTED]] Sent: Tuesday, 
December 04, 2001 10:36 AMTo: MS-Exchange Admin 
IssuesSubject: RE: exchange on a 
DC
It wouldn't be my first choice, but I'd do it 
if I "had" to.

D

"DOS 6: Because there aren'

RE: [virus] For those of you who dont see the big picture

2001-12-05 Thread Bruce Harrison
Title: Message



Kevin, 
are you doing this while the server is online? Since one of the steps is 
stopping the IS, I am planning to do this this evening. Have you run into any 
issues yet?

  -Original Message-From: Kevin Miller 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, December 04, 2001 
  7:37 PMTo: MS-Exchange Admin IssuesSubject: RE: [virus] 
  For those of you who dont see the big picture
  It 
  is on there machines. no need to reopen it.. :  But yes you can 
  still kill it with ISscann. I am doing that right now on a 
  server.
  
  
  --
  Kevinm M WLKMMAS, 
  UCC+WCA, CKWSE CKST
  

-Original Message-From: *ExchangeAdmin 
[mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 
2001 4:34 PMTo: MS-Exchange Admin IssuesSubject: RE: 
[virus] For those of you who dont see the big picture
Excellent point, but regardless you can still use ISSCAN to remove 
attachments from your IS right? That way after your done rebuilding 
all of your machines, someone can't re-open it ;-)

  -Original Message-From: Kevin Miller 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, December 04, 
  2001 4:09 PMTo: MS-Exchange Admin IssuesSubject: 
  [virus] For those of you who dont see the big picture
  Cleaned or not, it is still on the machines that 
  sent it. Read what it does? cleaning the server is only the 
  beginning..
  
  http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_GONE.AVSect=T
  
  
  --
  Kevinm M WLKMMAS, 
  UCC+WCA, CKWSE CKST
  

-Original Message-From: 
*ExchangeAdmin [mailto:[EMAIL PROTECTED]] Sent: 
Tuesday, December 04, 2001 4:03 PMTo: MS-Exchange Admin 
IssuesSubject: RE: *** Warning *** New Virus - 
W32.goner.a@mm
Not sure about E2k, but if you are using 5.5 check out 
Q224493 
Danny Cahoon Network 
Engineer Saflink Corp 
-Original Message- From: 
Mal Sasalu [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 1:43 PM 
To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 

Hi there,  
Is there any tool with which I can clean all the 
mailboxes on my exchange from this dirty "Hi" message?  Thanks mal   -Original Message- 
From: Bob Fronk (BTR Technologies, Inc) [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 2:13 PM 
To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 
 Configure NAV for 
Exchange to block attachments. This stopped "goner" in its 
tracks. I block: *.com, *.exe, *.scr and also the "double 
extensions" like *.jpg.vbs. and assorted others. 
http://service4.symantec.com/SUPPORT/ent-security.nsf/docid/271215411348 
 Bob  -Original Message- 
From: Karen Palmer [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 04, 2001 4:03 PM 
To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 
 We just got this 
one. Norton's on Exchange and the desktops did NOT catch 
it and our virus definitions are current, so be 
careful. We are downloading Antigen as I 
type.  Karen 
Palmer SCJD   List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm 
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: exchange on a DC

2001-12-05 Thread Bruce Harrison
Title: Message



This 
may be a feature that is unique to the hardware I am using, but I hope not since 
it is so useful. I have aHewlett 
Packard SureStore DAT24i tape drive which uses 4mm DDS-3 tapes. You carry 
out a full backup of the system and data partitions. In case of disaster, insert 
the first tape, power up the server while holding down the tape drive eject 
button, and it goes into "boot" mode. It boots from the tape and begins 
restoring the image. HP calls this a "One-Button Restore." Wish I were getting a 
commission on this.

  -Original Message-From: MHR(Michael Ross) 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 05, 2001 10:08 
  AMTo: MS-Exchange Admin IssuesSubject: RE: exchange on a 
  DC
  The 
  one button restore part. .and how to boot from that tape drive.. This would be 
  Invaluable to me!!!
  
  

-Original Message-From: Bruce Harrison 
[mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 
05, 2001 8:51 AMTo: MS-Exchange Admin IssuesSubject: 
RE: exchange on a DC
Which part, Michael? The one-button restore or the 
part about restoring exchange to a recovery server?

  -Original Message-From: MHR(Michael Ross) 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 05, 2001 9:34 
  AMTo: MS-Exchange Admin IssuesSubject: RE: exchange 
  on a DC
  got info on exactly how to do that?
  

-Original Message-From: Bruce 
Harrison [mailto:[EMAIL PROTECTED]] Sent: 
Wednesday, December 05, 2001 8:31 AMTo: MS-Exchange Admin 
IssuesSubject: RE: exchange on a DC
Backup Exec has this kind of feature. You can 
carry out a full "image" backup called a "One button DR", then when 
disaster strikes you can actually boot from the tape and restore the 
entire hard drive. If you are a one-server shop, you have to be careful 
about your domain SID when disaster strikes, although I have heard there 
is some utility somewhere ? that will allow you to restore your Exchange 
server to a recovery server even if the recovery server has a different 
name. Anyone have a line on this utility?

  -Original Message-From: Micciche, Robert 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, 
  December 05, 2001 9:18 AMTo: MS-Exchange Admin 
  IssuesSubject: RE: exchange on a DC
  I believe that if Exchange is youronly DC (it is the PDC) 
  you are going to be hurtin for certain if you need to do a server 
  recovery, unless you have backup software that lets you boot from a CD 
  and restore the entire server as an single 
"image".
  
-Original Message-From: Benjamin Zachary 
[mailto:[EMAIL PROTECTED]]Sent: Tuesday, 
December 04, 2001 6:20 PMTo: MS-Exchange Admin 
IssuesSubject: RE: exchange on a DC
Same here as well. We consult/manage many 10-100 user shops 
which many only have 1 or 2 servers. Typically the second server is 
dedicated for SQL or TS as their 'app' server and the other server 
houses everything else, file and print, DC and exchange. Heck I have 
a 80 user server running raid1/raid5 with exchange and 16 port fax 
modems for fax blasting heh.. the box runs like a champ its only a 
dual 600 with 1gig ram

  
  -Original 
  Message-From: Ellery July [mailto:[EMAIL PROTECTED]] 
  Sent: Tuesday, December 04, 2001 6:17 PMTo: 
  MS-Exchange Admin IssuesSubject: RE: exchange on a 
  DC
  Actually it is done more often then not in the places I 
  visit. Of course I visit a lot of 10-50 person shops running SBS 
  or have only two servers. I do not know for sure but would be will 
  to bet that more window2000AD/ exchange 2000 setup are running on 
  the same box then not. I run AD on its own box and most people 
  think see that as extravagant.
  
  ellery
  
-Original Message-From: 
Don Ely [mailto:[EMAIL PROTECTED]]Sent: 
Tuesday, December 04, 2001 10:47 AMTo: MS-Exchange 
Admin IssuesSubject: RE: exchange on a 
DC
Sure it's "OK", it's not standard practice, 
but it's OK. I don't always follow MS's directions 
either. If it works in your environment, then cool. 


Personally, from the sounds of it, you have a 
multitude of servers at each site. That said, I would have 
to wonder why you'd put exchange on a DC. If I'

RE: Newbie needs help

2001-12-04 Thread Bruce Harrison
Title: Newbie needs help



This 
thread about relaying keeps coming up, so it must be a hot issue. I have just 
been through the whole process of finding out my Exchange box was being used for 
relaying, securing it, finding out I was black-listed, getting off the 
black-list, etc. Start by going to http://orbz.org 
and reading all the FAQ's. On the FAQ page is a link to the MS article on 
securing your server. You can also learn how to find out if you are on the DNS 
black-list and how to get off.

  -Original Message-From: Jeff A. Clarke 
  [mailto:[EMAIL PROTECTED]]Sent: Monday, December 03, 2001 9:02 
  AMTo: MS-Exchange Admin IssuesSubject: Newbie needs 
  help
  My exchange seems to be sending (relaying?) out a 
  ton of mail. My server seems to continuously use up RAM until it is 
  exhuasted. I have scanned all our PCs/Servers for virus and everything 
  seems to be clean.
  Platform W2K, E2K all latest service packs. 
  
  I can somewhat contain the problem thru Exchange 
  System Manager under Administrative Groups|First Administrative 
  Group|Servers|MMT02|Protocols|SMTP|New (this is our connector) |Queues - then 
  Freezing all messages. I can see something like 100 or so queues. 
  I can't delete them.
  What steps should I do to stop and prevent this 
  problem. Any help would be appreciated! 
  Jeff Clarke 
  IT Manager 
  Micro Molding 
  Technologies, LLC (561) 738-5197 
  Please check out our 
  website at www.mmti.org List Charter and 
  FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: *** Warning *** New Virus - W32.goner.a@mm

2001-12-04 Thread Bruce Harrison

Anyone done this and can tell me if it requires a reboot to take effect? We
are in full production mode at the moment.

-Original Message-
From: Dennis Atherton [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 3:27 PM
To: MS-Exchange Admin Issues
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm


Download and save the file sarcx86.exe, and then execute it on the system to
be updated.

-Original Message-
From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 04, 2001 11:50 AM
To: MS-Exchange Admin Issues
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm



Which file do you grab from there 

-Original Message- 
From: Philip Youngworth [ mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] ] 
Sent: Tuesday, December 04, 2001 1:37 PM 
To: MS-Exchange Admin Issues 
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 


You can get the sarc update from their ftp server. 

ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/norto
ftp://ftp2.symantec.com/public/english_us_canada/antivirus_definitions/nort
o  
n_antivirus/specdef 

You should be able to grab the sarc there for it. 

-Original Message- 
From: Cicerrella, Steve [ mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED]
] 
Sent: Tuesday, December 04, 2001 2:24 PM 
To: MS-Exchange Admin Issues 
Subject: RE: *** Warning *** New Virus - W32.goner.a@mm 


Seeing this one already.I have not found a patch for Norton for 
Exchange yet.Already sent a broadcast to the users pleading with them 
to use some common sense and explicitly telling them NOT to open that one. 
I wonder how many of them will open it anyway..   ;) 

Steve 



-Original Message- 
From: Briggs, Bruce [ mailto:[EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] ] 
Sent: Tuesday, December 04, 2001 10:41 AM 
To: MS-Exchange Admin Issues 
Subject: *** Warning *** New Virus - W32.goner.a@mm 


Just in case you are not aware yet, there is a new virus out there. Lots of
incoming infected mail here, right now. We got an automatic update this
morning for Antigen which is protecting us. Hope the same for you.

http:[EMAIL PROTECTED]
http:[EMAIL PROTECTED]
  

Bruce Briggs 
System Administration 
State University of NY 

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
http://www.sunbelt-software.com/exchange_list_charter.htm  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
http://www.sunbelt-software.com/exchange_list_charter.htm  


*** 
The information transmitted in this email is intended only for the person(s)
or entity to which it is addressed and may contain confidential and/or
privileged material.  Any review, 

retransmission, dissemination or other use of, or taking of 
any action in reliance upon, this information by persons or entities other
than the intended recipient is prohibited. If you received this email in
error, please contact the sender and permanently delete the email from any
computer.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
http://www.sunbelt-software.com/exchange_list_charter.htm  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Outlook 98 ?

2001-12-03 Thread Bruce Harrison

Check your options in Outlook as far as the choice of how many months of
free/busy information to show on the calendar. The default is 2-3 months, I
believe. Extend this out and you will see more items show up.

Of course, there could be a nefarious plot to cripple Outlook 98 and make
you upgrade by 2001. :-)

-Original Message-
From: Mitchell Mike [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 03, 2001 11:18 AM
To: MS-Exchange Admin Issues
Subject: Outlook 98 ?


Good morning,

Outlook 98 exchange 5.5 sp4.

Please direct me to an Outlook user group if this is an Outlook problem...

When adding holidays to the calendar it only adds holidays from 1997 - 2001.
We do not have holidays for anything from 12/24/2001 - to the end of time.
How do I get updates for future holidays.  

Have a great day.


Mike Mitchell
Systems eMAIL Administrator
Alverno Information Services
[EMAIL PROTECTED]
(317) 532-7800 ext. 6211


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Lost Folders

2001-11-29 Thread Bruce Harrison

Stranger things have happened, but don't ever overlook the infamous ID TEN T
errors.  (ID10T)

-Original Message-
From: John Theed [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 29, 2001 8:20 AM
To: MS-Exchange Admin Issues
Subject: Lost Folders


What might cause someone to lose the folders they created in there Outlook?
The setup is NT 4.0 Sever W SP6A, Exchange Server V5.5 with SP4. Employee
left one day and logged off as he normally does, and when he came back in
the next morning, the folders were gone. Nothing had been done as
Maintenance or anything like that during the evening.

Thanks

John


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Exchange Mailbox Logon

2001-11-29 Thread Bruce Harrison



Go 
into the logging and security tabs and make sure you have it set to minimal 
logging. I don't know that you can disable all security logging, however--some 
is built in.

  -Original Message-From: Todd White 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, November 29, 2001 
  4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Exchange 
  Mailbox Logon
  anyone?
  
  Todd White System Administrator LaserComm Inc. 972-941-0276 Voice 972-941-0223 Fax 
  The contents of this e-mail and any 
  attachments are the property of LaserComm Inc, its subsidiaries or licensors 
  and are intended to be private and confidential. This material is 
  intended solely for the individual to whom it is addressed. The material 
  is protected by various laws, including those related to copyright and trade 
  secret, and may not be used, copied or distributed without the express 
  permission of LaserComm Inc. If you have received this message in error, 
  please notify the sender by return e-mail and delete the 
  correspondence.
  
-Original Message-From: Todd White 
[mailto:[EMAIL PROTECTED]]Sent: Thursday, November 29, 
2001 9:46 AMTo: MS-Exchange Admin IssuesSubject: 
Exchange Mailbox Logon
Is there a way 
to delete the mailbox logon log that Exchange keeps in Exchange Server 
5.5? If not how long and how many does it keep of the last people that 
logged on to a specific mailbox?


Todd White System Administrator LaserComm Inc. 972-941-0276 Voice 972-941-0223 Fax 
The contents of this e-mail and any 
attachments are the property of LaserComm Inc, its subsidiaries or licensors 
and are intended to be private and confidential. This material is 
intended solely for the individual to whom it is addressed. The 
material is protected by various laws, including those related to copyright 
and trade secret, and may not be used, copied or distributed without the 
express permission of LaserComm Inc. If you have received this message 
in error, please notify the sender by return e-mail and delete the 
correspondence.
List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: Exchange 2k and OWA...

2001-11-28 Thread Bruce Harrison

These are new terms to me-- what is the difference between a front- and
back-end exchange server? Do you mean on the inside and outside of your
firewall?

-Original Message-
From: Preston Jeffares [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 10:10 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2k and OWA...


Here's the deal:

Windows 2000 sp2
Exchange 2k sp1
2 back-end exchange servers
1 front-end exchange server

Installed the OWA server in the same domain and subnet as all of the
other servers.  Installed exchange and prior to making it a front end
server, I could http to it and log in using Username, password, and
domain... it would then forward me onto one of the internal servers and
I would log in again there.  I made it a front end server and chose
basic authentication.  After http'ing to it again, I was now prompted
with just username and password... no domain.  I set the default domain
to domain.local.  I would enter my username and password, hit enter, and
be prompted 2 more times before getting an Error: Access Denied.  Event
logs showed:

Event Type: Warning
Event Source:   W3SVC
Event Category: None
Event ID:   100
Date:   11/28/2001
Time:   9:56:05 AM
User:   N/A
Computer:   OWA
Description:
The server was unable to logon the Windows NT account 'noone' due to the
following error: Logon failure: unknown user name or bad password.  The
data is the error code. 
For additional information specific to this message please visit the
Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp. 
Data:
: 2e 05 00 00   

Any ideas?!  The account and password are valid... the server is on the
domain and there is nothing between it and the DC's... I'm a bit lost
because this is usually an easy install.

Preston Craig Jeffares
Network Engineer
Georgia Department of Motor Vehicle Safety

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Exchange 2k and OWA...

2001-11-28 Thread Bruce Harrison

Crystal clear. Thanks.

-Original Message-
From: Preston Jeffares [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 10:40 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2k and OWA...


No... in Exchange 2k you can opt to make a traditional exchange server a
front-end server.  All requests are sent to it and then it handles all
communications with any back-end server (production exchange servers)
needed.  Once it grabs the info... it displays it to the user.

-Original Message-
From: Bruce Harrison [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 10:29 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2k and OWA...


These are new terms to me-- what is the difference between a front- and
back-end exchange server? Do you mean on the inside and outside of your
firewall?

-Original Message-
From: Preston Jeffares [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 10:10 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2k and OWA...


Here's the deal:

Windows 2000 sp2
Exchange 2k sp1
2 back-end exchange servers
1 front-end exchange server

Installed the OWA server in the same domain and subnet as all of the
other servers.  Installed exchange and prior to making it a front end
server, I could http to it and log in using Username, password, and
domain... it would then forward me onto one of the internal servers and
I would log in again there.  I made it a front end server and chose
basic authentication.  After http'ing to it again, I was now prompted
with just username and password... no domain.  I set the default domain
to domain.local.  I would enter my username and password, hit enter, and
be prompted 2 more times before getting an Error: Access Denied.  Event
logs showed:

Event Type: Warning
Event Source:   W3SVC
Event Category: None
Event ID:   100
Date:   11/28/2001
Time:   9:56:05 AM
User:   N/A
Computer:   OWA
Description:
The server was unable to logon the Windows NT account 'noone' due to the
following error: Logon failure: unknown user name or bad password.  The
data is the error code. 
For additional information specific to this message please visit the
Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp. 
Data:
: 2e 05 00 00   

Any ideas?!  The account and password are valid... the server is on the
domain and there is nothing between it and the DC's... I'm a bit lost
because this is usually an easy install.

Preston Craig Jeffares
Network Engineer
Georgia Department of Motor Vehicle Safety

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Information Store memory utilization is out of control

2001-11-28 Thread Bruce Harrison

General question on this thread: I do online backups of my Exch. 5.5 SP4
server daily. What exactly constitutes an offline backup? Does this mean you
stop all the Exchange services first or just make sure no users are
connected to the server? What is the easiest way to ensure it is an offline
backup?

-Original Message-
From: Benjamin Winzenz [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 4:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Information Store memory utilization is out of control


And this isn't something that everyone should be attemtpting unless you are
well versed in using these utilities and know the risks.  Bottom line, if
you aren't sure what is going on, or what is causing the problem, call PSS.
It will be worth the $245 you spend for the call.  And you will learn a lot.
And before you attempt any maintenance, make sure that you have both an
online and offline backup - just in case.

Ben Winzenz, MCSE
Network/Systems Administrator
Peregrine Systems, Inc.


-Original Message-
From: David James [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 28, 2001 3:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Information Store memory utilization is out of control

I had this problem due to a corrupt database.  A good offline defrag fixed
it...

-Original Message-
From: Preston Jeffares [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 28, 2001 1:40 PM
To: MS-Exchange Admin Issues
Subject: RE: Information Store memory utilization is out of control


So then he needs to limit it using the optimizer.

-Original Message-
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 2:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Information Store memory utilization is out of control


True, but he says after a time the memory usage crashes his box, so it must
be going overboard.

-Original Message-
From: Preston Jeffares [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, November 28, 2001 11:10 AM
To: MS-Exchange Admin Issues
Subject: RE: Information Store memory utilization is out of control


This is common.  STORE.EXE will use all available memory unless manually
limited in the Optimizer.

-Original Message-
From: Geoff Waycik [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 28, 2001 1:07 PM
To: MS-Exchange Admin Issues
Subject: Information Store memory utilization is out of control


I look after two servers for clients with Exchange Server 5.5 SP4 installed.
Recently, one of the server's STORE.EXE process (lets call it
SERVER1) started going out of control with respect to memory utilization.
It starts at a reasonable 5M to 10M of memory used, then gradually climbs to
about 300M.  If I stop and restart the IS service, 400M to 500M of memory
will clear up and STORE.EXE will drop down to it's usual 5M to 10M.  If I
don't stop and restart, the server starts to crumble, complaining about
running out of memory.

Software Installed on both Servers Are:
Microsoft Small Business Server 4.5
Inoculan for Small Business Server (i was young and foolish) ArcServe for
Small Business Server (ditto) Latest Service Packs and hotfixes for OS SP4
for Exchange, no hotfixes Memory for SERVER1 = 512M Memory for SERVER2 =
384M

The one thing they have done recently is to upgrade their Internet service
to DSL.  SERVER1 network was upgraded first and almost immediately they
began having this problem.  The other server's network was upgraded last
week but am not sure that the memory problem exactly coincided with the
upgrade.

Any help is greatly appreciated.  Thanks.

Geoff Waycik MCSE
Tel: 613 384-4210 Fax: 613 384-8981 [EMAIL PROTECTED]


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: OWA for Exchange 5.5 on a IIS5 server (not exchange) -who thi nks about this stuff

2001-11-21 Thread Bruce Harrison

My installation is similar to yours. 

Exchange 5.5 on NT 4.0 on one box
OWA on NT 4.0 on another box

Enable the http protocol on the Exchange server, set up OWA in IIS on the
OWA box, set the default webpage. Both boxes are SP6a. 

I haven't seen any good whitepapers on doing this.

-Original Message-
From: Ellery July [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 20, 2001 6:49 PM
To: MS-Exchange Admin Issues
Subject: OWA for Exchange 5.5 on a IIS5 server (not exchange) -who
thinks about this stuff



Where are good whitepapers, thinking, or online resources that talk about
loading  OWA from Exchange 5.5 on windows.

We are talking Exchange 5.5  in a Windows 2000 box
OWA on a different  windows 2000 box running IIS5
All in a windows 2000 domain.

expect to upgrade to E2K in six months.

Someone asked me to do this - why me? because I am willing to do it for
free.

ellery



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: OWA with SSL

2001-11-21 Thread Bruce Harrison

Outlook Web Access for remote users. You can pull up e-mail and calendar
from anywhere.

-Original Message-
From: Nickolaos Fotopoulos [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 20, 2001 7:02 PM
To: MS-Exchange Admin Issues
Subject: RE: OWA with SSL


silly question but, whats OWA?

-Original Message-
From: Ellery July [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 20, 2001 7:01 PM
To: MS-Exchange Admin Issues
Subject: RE: OWA with SSL


what error messages are you getting?

-Original Message-
From: Rafael Fernandes Novo [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 6:18 AM
To: MS-Exchange Admin Issues
Subject: OWA with SSL


Hi,

I've a problem with E2K (SP1) + W2K (SP2).

OWA has a SSL key, that seems to be working fine. But when I try to
reply messages, the body doesn't appear, in the reply!
I open the message, and the body is there. When I reply, the body
doesn't come!


Any Ideas???
Rafael

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: OWA and SP4

2001-11-21 Thread Bruce Harrison
Title: OWA and SP4



Try 
using the IP address of the server with the /exchange in a browser on the 
internal network to see if that part of it is working. e.g.; 
205.3.254.133/exchange

If it 
works, then you can tackle the issue of why you can't see it from the 
outside.

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, November 21, 2001 9:44 
  AMTo: MS-Exchange Admin IssuesSubject: RE: OWA and 
  SP4
  I have internal 
  and external DNS so I have two FQDNs pointing to the same OWA, though internal 
  users never use it (I'm about the only one). I get a 404 coming both from the 
  inside and the outside using either FQDN.
  
-Original Message-From: Bruce Harrison 
[mailto:[EMAIL PROTECTED]]Sent: Wednesday, November 
21, 2001 8:15 AMTo: MS-Exchange Admin IssuesSubject: 
RE: OWA and SP4
Are user getting the error from the outside? In our 
installation, due to the way the router is set up with NAT, users have to 
type in the IP address/exchange in their browsers to open OWA internally. 
From the outside, they type in the 
servername.FQDN/exchange.

  -Original Message-From: Eric Peeters 
  [mailto:[EMAIL PROTECTED]]Sent: Tuesday, November 20, 2001 
  5:30 PMTo: MS-Exchange Admin IssuesSubject: RE: OWA 
  and SP4
  OWA is 
  installed on my Exchange server and I get the same 404 error when trying 
  to access it internally.
  
-Original Message-From: Lefkovics, William 
[mailto:[EMAIL PROTECTED]]Sent: Monday, November 19, 
2001 4:22 PMTo: MS-Exchange Admin IssuesSubject: 
RE: OWA and SP4
I assume OWA is on the same server as the primary Exchange 
server?

Does OWA work internally or from the actual 
server?

(Yes, reinstalling OWA would require reapplication of 
sp4)

William

-Original Message-From: Eric Peeters 
[mailto:[EMAIL PROTECTED]]Sent: Monday, November 19, 2001 
2:20 PMTo: MS-Exchange Admin IssuesSubject: OWA 
and SP4
Hello, 
I've recently installed SP4 on my Exchange 
5.5 server and it broke OWA. When users type in the URL for OWA, they 
are prompted for authentication as normal but then they get a 404 
instead of a page asking them for their user name and password. I have 
looked through the Microsoft KB for pointers without luck. I am thinking 
of reinstalling OWA but before I do so, I wanted to see if other people 
had had similar experiences.
Also, if I resintall OWA, don't I have to 
reinstall SP4 afterwards ? 
Eric Peeters Network Administrator TexLoc 
Ltd List Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
Charter and FAQ 
at:http://www.sunbelt-software.com/exchange_list_charter.htmList 
  Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: anti-relay

2001-11-21 Thread Bruce Harrison
Title: anti-relay



http://www.exchangeadmin.com/Articles/Index.cfm?ArticleID=7696This isn't at MS, but I 
believe it is what you are looking for.

  -Original Message-From: Bryan Hanes 
  [mailto:[EMAIL PROTECTED]]Sent: Wednesday, November 21, 2001 
  12:29 PMTo: MS-Exchange Admin IssuesSubject: 
  anti-relay
  Could someone point me to the document that 
  describes how to prevent Exchange 5.5 from being used as a relay agent 
  please?
  Can't seem to find it on Microsoft's site 
  anymore. 
  TIA, Bryan List Charter and FAQ 
  at:http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm





RE: IIS SMTP relay server - Is someone using my relay server?

2001-11-20 Thread Bruce Harrison

I just had the same situation yesterday. Someone was using my exchange
server 5.5 as a relay point. There is a well-documented procedure to close
this situation off. I carried out the procedure, and voila, no more backed
up outgoing queue in IMS. Worked great! Here is the link. Print out this
article, follow the steps, and your problem will be over. No reboot
necessary. I did it during the day.
http://www.exchangeadmin.com/Articles/Index.cfm?ArticleID=7696

Bruce Harrison
Information Technology Manager
The Boudreaux Group

-Original Message-
From: Jesse Rink [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 20, 2001 3:28 PM
To: MS-Exchange Admin Issues
Subject: IIS SMTP relay server - Is someone using my relay server?


Okay. Here's the low-down.

I have an Exchange 5.5 server on the inside interface of our firewall and
and IIS SMTP relay server on the DMZ interface of our firewall. This has
been running for several months without any problems.

Yesterday I reviewed the daily network bandwidth chart for our T1 line out
the to internet and found the inbound traffic was WAY higher (my eyes
almost popped out of my sockets) than usual. This was highly noticeable
in that the inbound traffic continued into the late hours of the night. 
Normally, after 5pm, network inbound/outbound traffic is dead.

I tried figuring out what all of a sudden is causing this increased
traffic and am beginning to suspect the IIS SMTP relay box. Performance
analysis on the box shows that the CPU utilization is much higher than
usual (mainly from inetinfo.exe). After further investigating, I noticed
that the c:\inetpub\mailroot\queue directory is suddenly full (1500
messages) of .rtr and .eml files (can someone explain the difference
between these?).

Not only are there 1500+ .rtr and .eml files in the queue, but the
messages themselves are not originating from or destined to whitnall.com
(my domain).

I'm assuming someone (most of the messages are from hotmail.com accounts
and contain PORN links) is using our smtp relay...

Can someone please help me address this problem? Not sure how to proceed.
Thanks

reply here or via email
[EMAIL PROTECTED]

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm