RE: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

[Chyka, Robert]

I am interested also please.

Thanks.

[cid:3366368584_1217441]

From: Tom Miller [mailto:tominyorkt...@gmail.com]
Sent: Tuesday, April 02, 2013 12:56 PM
To: MS-Exchange Admin Issues
Subject: Re: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

That would be appreciated, thanks.

On Tue, Apr 2, 2013 at 10:39 AM, Steve Ens 
mailto:stevey...@gmail.com>> wrote:
Symantec gave me a couple of scripts to use a while back to "fix" this issue.  
If you're interested I can see if I can pull them up.

On Tue, Apr 2, 2013 at 4:33 AM, Tom Miller 
mailto:tominyorkt...@gmail.com>> wrote:
Thanks for the comments and it's good to know it's not just my environment at 
least.  The backups never fail on my small databases and public folders, just 
the large databases.  When I check on the backups, I see the backup rate 
getting slower as time goes by and I suppose it times out.  I use backup to 
disk, copy to tape method.

Anyone have any suggestions for a product that works?

Tom

On Mon, Apr 1, 2013 at 10:21 PM, Steve Ens 
mailto:stevey...@gmail.com>> wrote:
My suggestion is to start tweeting to the backup exec accountthat usually 
wakes up their tier two or three support.

Sent from my FriPad

On 2013-04-01, at 9:04 PM, "Chyka, Robert" 
mailto:bch...@medaille.edu>> wrote:
I am using the same setup with you and encountering the same issues.  I get a 
successful, clean, no error backup about once every 6 backups or so.  I am very 
frustrated also.  I may consider changing software packages if this doesn't get 
fixed soon.  I really don't think this is a Microsoft issue as my exchange 
environment is very stable.



From: Tom Miller 
[mailto:tominyorkt...@gmail.com<mailto:tominyorkt...@gmail.com>]
Sent: Monday, April 01, 2013 9:30 PM
To: MS-Exchange Admin Issues
Subject: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

I've been having issues with Backup Exec backing up my Exchange 2010 SP3 
environment.  I've had the same issues since we migrated to Exchange 2010 and 
that was on SP2.

Backup Exec 2012 (and Backup Exec 2010 before I upgraded) always failed on 
Exchange DAGs here.  This is a VMware environment.  Exchange is on Windows 2008 
R2 servers.  My environment is simple:  two CAS servers, two DAG servers.

I opened a support request with Symantec about the issue.  The response I 
received is:

 I would like to inform you that exchange 2010 SP3 is not yet supported by the 
latest version of BE at the moment.

By not supported I mean that BE has not been tested with Exchange 2010 SP3 
officialy. Support for the same may be expected in upcoming releases.

About the VSS writers, BE calls them during the backup to take a snapshot of 
the databases and logs. But due to some reason the writers fail again and again 
and cause the backup job to fail inturn.

In this case, I would suggest you to contact Microsoft Support to fix the VSS 
writer issue. Once fixed, you can continue taking backups successfully. Just 
make sure that the Advanced Open File Option is not selected in the backup as 
it is not recommended for exchange.
Well...that sucks.  I didn't know about the advanced open file. so I'll disable 
that and give it another try.  So, what are you folks using for backup?  The 
vss writers are always stable, at least when I check.

Tom



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist<>

RE: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

[Chyka, Robert]

Yes right on.  I had a Symantec technician work on my issue for a total of 8 
hours over 2 days and he pretty much gave up.  He told me he was going ot do 
some more research and get back to me.  That was 3 weeks ago.

BTW he didn't put blame on my Exchange 2010 environment even once.
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, April 01, 2013 10:10 PM
To: MS-Exchange Admin Issues
Subject: RE: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

VSS specifications did not change for Exchange 2010 sp3.

They did for Exchange 2013.

Any compliant implementation for Exchange 2010 should work regardless of the 
service pack.

From: Chyka, Robert [mailto:bch...@medaille.edu]
Sent: Monday, April 1, 2013 10:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

I am using the same setup with you and encountering the same issues.  I get a 
successful, clean, no error backup about once every 6 backups or so.  I am very 
frustrated also.  I may consider changing software packages if this doesn't get 
fixed soon.  I really don't think this is a Microsoft issue as my exchange 
environment is very stable.

[cid:3366368584_1217441]

From: Tom Miller [mailto:tominyorkt...@gmail.com]
Sent: Monday, April 01, 2013 9:30 PM
To: MS-Exchange Admin Issues
Subject: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

I've been having issues with Backup Exec backing up my Exchange 2010 SP3 
environment.  I've had the same issues since we migrated to Exchange 2010 and 
that was on SP2.

Backup Exec 2012 (and Backup Exec 2010 before I upgraded) always failed on 
Exchange DAGs here.  This is a VMware environment.  Exchange is on Windows 2008 
R2 servers.  My environment is simple:  two CAS servers, two DAG servers.

I opened a support request with Symantec about the issue.  The response I 
received is:

 I would like to inform you that exchange 2010 SP3 is not yet supported by the 
latest version of BE at the moment.

By not supported I mean that BE has not been tested with Exchange 2010 SP3 
officialy. Support for the same may be expected in upcoming releases.

About the VSS writers, BE calls them during the backup to take a snapshot of 
the databases and logs. But due to some reason the writers fail again and again 
and cause the backup job to fail inturn.

In this case, I would suggest you to contact Microsoft Support to fix the VSS 
writer issue. Once fixed, you can continue taking backups successfully. Just 
make sure that the Advanced Open File Option is not selected in the backup as 
it is not recommended for exchange.
Well...that sucks.  I didn't know about the advanced open file. so I'll disable 
that and give it another try.  So, what are you folks using for backup?  The 
vss writers are always stable, at least when I check.

Tom



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist<>

RE: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

[Chyka, Robert]

I am using the same setup with you and encountering the same issues.  I get a 
successful, clean, no error backup about once every 6 backups or so.  I am very 
frustrated also.  I may consider changing software packages if this doesn't get 
fixed soon.  I really don't think this is a Microsoft issue as my exchange 
environment is very stable.

[cid:3366368584_1217441]

From: Tom Miller [mailto:tominyorkt...@gmail.com]
Sent: Monday, April 01, 2013 9:30 PM
To: MS-Exchange Admin Issues
Subject: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

I've been having issues with Backup Exec backing up my Exchange 2010 SP3 
environment.  I've had the same issues since we migrated to Exchange 2010 and 
that was on SP2.

Backup Exec 2012 (and Backup Exec 2010 before I upgraded) always failed on 
Exchange DAGs here.  This is a VMware environment.  Exchange is on Windows 2008 
R2 servers.  My environment is simple:  two CAS servers, two DAG servers.

I opened a support request with Symantec about the issue.  The response I 
received is:

 I would like to inform you that exchange 2010 SP3 is not yet supported by the 
latest version of BE at the moment.

By not supported I mean that BE has not been tested with Exchange 2010 SP3 
officialy. Support for the same may be expected in upcoming releases.

About the VSS writers, BE calls them during the backup to take a snapshot of 
the databases and logs. But due to some reason the writers fail again and again 
and cause the backup job to fail inturn.

In this case, I would suggest you to contact Microsoft Support to fix the VSS 
writer issue. Once fixed, you can continue taking backups successfully. Just 
make sure that the Advanced Open File Option is not selected in the backup as 
it is not recommended for exchange.
Well...that sucks.  I didn't know about the advanced open file. so I'll disable 
that and give it another try.  So, what are you folks using for backup?  The 
vss writers are always stable, at least when I check.

Tom



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist<>

How to extract Calendar Items from Server that has been offline for a couple yrs.

[Chyka, Robert]

Is there any way to extract calendar items for a particular user from a
server that has been in a closet for 3 years?  I do not want to plug it
back into our network and have it mess with our current e-mail server.
I want to turn it back on with no network connectivity.  Is there any
tool I can use with the local Admin account to extract old calendar
items for a particular user?

 

Thanks for your help.

 

BOb


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Room Scheduling Program

[Chyka, Robert]

I was just reading about it.  Looks great.  Thanks...

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Thursday, August 19, 2010 12:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Room Scheduling Program

 

Then wait. Exchange 2010 has HUGE feature content around resource
scheduling.

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Thursday, August 19, 2010 11:29 AM
To: MS-Exchange Admin Issues
Subject: RE: Room Scheduling Program

 

E are on 2003 now, but moving to 2010 over Thanksgiving Break.

 

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] 
Sent: Thursday, August 19, 2010 11:21 AM
To: MS-Exchange Admin Issues
Subject: RE: Room Scheduling Program

 

If you're using Exchange 2007, have you looked into the built in
resource room / scheduling assistants?

 

http://msexchangeteam.com/archive/2007/05/14/438944.aspx

 

From: bounce-9066301-8066...@lyris.sunbelt-software.com
[mailto:bounce-9066301-8066...@lyris.sunbelt-software.com] On Behalf Of
Chyka, Robert
Sent: 19 August 2010 16:07
To: MS-Exchange Admin Issues
Subject: Room Scheduling Program

 

Does anybody use a 3rd party Room Scheduling Resource program for
Exchange?  I am looking to have something that is laid out real nice and
easy to read and use.  I don't care if I have to purchase something.  It
would be for about 50-100 rooms.

 

Thanks for your help.

 

Bob

RE: Room Scheduling Program

[Chyka, Robert]

E are on 2003 now, but moving to 2010 over Thanksgiving Break.

 

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] 
Sent: Thursday, August 19, 2010 11:21 AM
To: MS-Exchange Admin Issues
Subject: RE: Room Scheduling Program

 

If you're using Exchange 2007, have you looked into the built in
resource room / scheduling assistants?

 

http://msexchangeteam.com/archive/2007/05/14/438944.aspx

 

From: bounce-9066301-8066...@lyris.sunbelt-software.com
[mailto:bounce-9066301-8066...@lyris.sunbelt-software.com] On Behalf Of
Chyka, Robert
Sent: 19 August 2010 16:07
To: MS-Exchange Admin Issues
Subject: Room Scheduling Program

 

Does anybody use a 3rd party Room Scheduling Resource program for
Exchange?  I am looking to have something that is laid out real nice and
easy to read and use.  I don't care if I have to purchase something.  It
would be for about 50-100 rooms.

 

Thanks for your help.

 

Bob

Room Scheduling Program

[Chyka, Robert]

Does anybody use a 3rd party Room Scheduling Resource program for
Exchange?  I am looking to have something that is laid out real nice and
easy to read and use.  I don't care if I have to purchase something.  It
would be for about 50-100 rooms.

 

Thanks for your help.

 

Bob

RE: Outlook Calendar Items Disappearing

[Chyka, Robert]

Nothing out of the ordinary, that is why I am scratching my head.  It is
only people who have others being able to access their calendars.  It
started with only 1 person, but now it is up to 8.

 

Thanks.  Bob

 

From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Wednesday, July 07, 2010 9:31 AM
To: MS-Exchange Admin Issues
Subject: RE: Outlook Calendar Items Disappearing

 

I would ask "what else happened on Thursday?"

 

Regards,

 

Michael B. Smith

Consultant and Exchange MVP

http://TheEssentialExchange.com

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Wednesday, July 07, 2010 9:28 AM
To: MS-Exchange Admin Issues
Subject: Outlook Calendar Items Disappearing

 

Hey everyone - We are running into a very strange issue here.  Since
last Thursday most people with delegates added to their Outlook 2007
calendars (Exchange 2003 Enterprise) have their calendar items disappear
shortly after putting them in.  It is very strange and they disappear
right in front of the users eyes.

 

We have checked the event viewer and can't find anything.  Has anyone
run into this issue before?

 

Thanks!  Bob

Outlook Calendar Items Disappearing

[Chyka, Robert]

Hey everyone - We are running into a very strange issue here.  Since
last Thursday most people with delegates added to their Outlook 2007
calendars (Exchange 2003 Enterprise) have their calendar items disappear
shortly after putting them in.  It is very strange and they disappear
right in front of the users eyes.

 

We have checked the event viewer and can't find anything.  Has anyone
run into this issue before?

 

Thanks!  Bob

RE: BLOCKING SPOOFED INTERNAL EMAIL

[Chyka, Robert]

Do you just add a rule with your domain listed?  

 



From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Tuesday, August 18, 2009 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

Absolutely, that's what the OP asked about and that's what I answered
about.

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Tuesday, August 18, 2009 1:10 PM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

On  Exchange 2003 too?

 



From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Tuesday, August 18, 2009 1:01 PM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

Exchange's sender filtering can also block inbound Internet mail from
your own domain.

 

Carl

 

From: Senter, John [mailto:john.sen...@etrade.com] 
Sent: Tuesday, August 18, 2009 8:54 AM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

What inbound mail gateway do you have?  Our gateways have a rule not to
except inbound e-mail where the sender address is our mail domain. 

 

From: Vincent DeSouza [mailto:vincent.deso...@nbkcapital.com] 
Sent: Tuesday, August 18, 2009 5:41 AM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

Implement SPF checks within your Antispam solution and have your DNS
updated accordingly. This will get rid of this type of junk.

 

Regards,

 

Vincent 

 

From: Markko Meriniit [mailto:markko.merin...@pria.ee] 
Sent: Tuesday, August 18, 2009 12:24
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

 

 You could look up info about the "Sender ID". Maybe implementing it
helps.

 

Markko Meriniit

-Original Message-
From: Murray Freeman [mailto:mfree...@alanet.org] 
Sent: Thursday, August 06, 2009 12:28 AM
To: MS-Exchange Admin Issues
Subject: BLOCKING SPOOFED INTERNAL EMAIL

Lately we're getting a lot of sp*m that appear to be coming from
our own staff. It's easy to spot, but our sp*m filter isn't catching
them. The reason they are easy to spot is the "FROM" has the full
address as oppossed to just the display name. Is it possible to create
an Outlook rule to block these? Is it possible to create a rule at the
Exchange Server level? And finally, if the rule works, will it impact
email created in OWA. We're using Outlook 2K3, Exchange 2K3 and Windows
Server 2K3.

 

Murray 

 

RE: BLOCKING SPOOFED INTERNAL EMAIL

[Chyka, Robert]

On  Exchange 2003 too?

 



From: Carl Houseman [mailto:c.house...@gmail.com] 
Sent: Tuesday, August 18, 2009 1:01 PM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

Exchange's sender filtering can also block inbound Internet mail from
your own domain.

 

Carl

 

From: Senter, John [mailto:john.sen...@etrade.com] 
Sent: Tuesday, August 18, 2009 8:54 AM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

What inbound mail gateway do you have?  Our gateways have a rule not to
except inbound e-mail where the sender address is our mail domain. 

 

From: Vincent DeSouza [mailto:vincent.deso...@nbkcapital.com] 
Sent: Tuesday, August 18, 2009 5:41 AM
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

Implement SPF checks within your Antispam solution and have your DNS
updated accordingly. This will get rid of this type of junk.

 

Regards,

 

Vincent 

 

From: Markko Meriniit [mailto:markko.merin...@pria.ee] 
Sent: Tuesday, August 18, 2009 12:24
To: MS-Exchange Admin Issues
Subject: RE: BLOCKING SPOOFED INTERNAL EMAIL

 

 

 You could look up info about the "Sender ID". Maybe implementing it
helps.

 

Markko Meriniit

-Original Message-
From: Murray Freeman [mailto:mfree...@alanet.org] 
Sent: Thursday, August 06, 2009 12:28 AM
To: MS-Exchange Admin Issues
Subject: BLOCKING SPOOFED INTERNAL EMAIL

Lately we're getting a lot of sp*m that appear to be coming from
our own staff. It's easy to spot, but our sp*m filter isn't catching
them. The reason they are easy to spot is the "FROM" has the full
address as oppossed to just the display name. Is it possible to create
an Outlook rule to block these? Is it possible to create a rule at the
Exchange Server level? And finally, if the rule works, will it impact
email created in OWA. We're using Outlook 2K3, Exchange 2K3 and Windows
Server 2K3.

 

Murray 

 

 Global Finance declares NBK Capital 'The Best Investment Bank In Kuwait
for
2009' 

- www.nbkcapital.com
  --

Attention

This e-mail and any files transmitted with it are intended solely for
the use of the individual or entity to which they are addressed. If you
have received this e-mail in error, please immediately notify the
sending individual or entity by e-mail and permanently delete the
original e-mail and attachment(s) from your computer system. If you are
not the intended recipient you are notified that disclosing, copying,
distributing or taking any action in reliance on the contents of this
information is strictly prohibited. 

Any opinions contained in this message are those of the author and are
not given or endorsed by NBK Capital, unless clearly indicated in the
message and the authority of the author to so bind NBK Capital is duly
verified. No warranty is given as to the legitimacy of e-Mail content
transmitted over the Internet.

RE: Quick Event Question

[Chyka, Robert]

We have a cisco asa... Do you know the command?  I just don't want to screw up 
the firewall.  Thanks for your help...

-Original Message-
From: "Kurt Buff" 
To: "MS-Exchange Admin Issues" 
Sent: 7/29/09 5:54 PM
Subject: Re: Quick Event Question

Consider?

Uh, make that *demand* - egress filtering is one of your strongest
security allies.

Default deny, baby.

Kurt

On Wed, Jul 29, 2009 at 14:02, Stephan Barr wrote:
> Consider having your firewall allow SMTP outbound from your Exchange server
> only.
>
> On Wed, Jul 29, 2009 at 10:56 AM, Chyka, Robert  wrote:
>>
>> We are running Exchange 2003 on Windows Server 2003.  We are fully patched
>> etc.  We are starting to get a slow growing amount of outbound SPAM trying
>> to be sent out of our Exchange server and we are looking to stop it before
>> it gets ugly.
>>
>>
>>
>> We are a verified closed relay host, but I am noticing a weird event for a
>> specific user in the event log.
>>
>>
>>
>> It is EventId 1708 and the Source is MSExchange Transport
>>
>>
>>
>> The text is:
>>
>>
>>
>> SMTP Authentication was performed successfully with client "[127.0.0.1]".
>> The authentication method was "NTLM" and the username was "xxx”
>>
>>
>>
>>
>>
>>
>>
>> I didn’t know if the 127.0.0.1 was an issue?  Never saw it before.
>>
>>
>>
>> Thanks!!!
>

RE: Quick Event Question

[Chyka, Robert]

Ok I under ExchangeTransport, I enabled SMTP logging and set it to
maximum.  Will the affected host show up with a 1708 EventId like the
username showed up in?

 

Thanks again...

 



From: Andy Shook [mailto:andy.sh...@peak10.com] 
Sent: Wednesday, July 29, 2009 1:26 PM
To: MS-Exchange Admin Issues
Subject: RE: Quick Event Question

 

+1.  My bet is that you have an internal machine that's been
infected/pwned and its spewing spam as fast as it can via an
authentication to your internal Exchange server.  

 

Shook

 

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] 
Sent: Wednesday, July 29, 2009 1:23 PM
To: MS-Exchange Admin Issues
Subject: RE: Quick Event Question

 

I'd turn on protocol logging.  I'm betting it's coming from another
machine, and it's messing with you by reporting it's hostname as being
[127.0.0.1].

 

________

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Wednesday, July 29, 2009 12:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Quick Event Question

 

It is very strange that it is only for one particular user.  They are
the only one authenticating in the event log.

 



From: Leedy, Andy [mailto:ale...@butlerahs.com] 
Sent: Wednesday, July 29, 2009 12:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Quick Event Question

 

Sounds like some process on your Exchange server is sending mail as
127.0.0.1 is localhost.  That is, that machine. I would check the task
manager to what processes are running.

 

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Wednesday, July 29, 2009 11:57 AM
To: MS-Exchange Admin Issues
Subject: Quick Event Question

 

We are running Exchange 2003 on Windows Server 2003.  We are fully
patched etc.  We are starting to get a slow growing amount of outbound
SPAM trying to be sent out of our Exchange server and we are looking to
stop it before it gets ugly.

 

We are a verified closed relay host, but I am noticing a weird event for
a specific user in the event log.

 

It is EventId 1708 and the Source is MSExchange Transport

 

The text is:

 

SMTP Authentication was performed successfully with client
"[127.0.0.1]".  The authentication method was "NTLM" and the username
was "xxx"

 

 

 

I didn't know if the 127.0.0.1 was an issue?  Never saw it before.

 

Thanks!!!

**

CONFIDENTIALITY NOTICE: The information transmitted in this message is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review,
retransmission, dissemination or other use of this information by
persons or entities other than the intended recipient is prohibited. If
you received this in error, please contact the sender and destroy all
copies of this document. Thank you. 

Butler Animal Health Supply

**

 


**
Note: 
The information contained in this message may be privileged and
confidential and 
protected from disclosure.  If the reader of this message is not the
intended  
recipient, or an employee or agent responsible for delivering this
message to  
the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If
you  
have received this communication in error, please notify us immediately
by  
replying to the message and deleting it from your computer. 

**

RE: Quick Event Question

[Chyka, Robert]

It is very strange that it is only for one particular user.  They are
the only one authenticating in the event log.

 



From: Leedy, Andy [mailto:ale...@butlerahs.com] 
Sent: Wednesday, July 29, 2009 12:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Quick Event Question

 

Sounds like some process on your Exchange server is sending mail as
127.0.0.1 is localhost.  That is, that machine. I would check the task
manager to what processes are running.

 

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Wednesday, July 29, 2009 11:57 AM
To: MS-Exchange Admin Issues
Subject: Quick Event Question

 

We are running Exchange 2003 on Windows Server 2003.  We are fully
patched etc.  We are starting to get a slow growing amount of outbound
SPAM trying to be sent out of our Exchange server and we are looking to
stop it before it gets ugly.

 

We are a verified closed relay host, but I am noticing a weird event for
a specific user in the event log.

 

It is EventId 1708 and the Source is MSExchange Transport

 

The text is:

 

SMTP Authentication was performed successfully with client
"[127.0.0.1]".  The authentication method was "NTLM" and the username
was "xxx"

 

 

 

I didn't know if the 127.0.0.1 was an issue?  Never saw it before.

 

Thanks!!!

**

CONFIDENTIALITY NOTICE: The information transmitted in this message is
intended only for the person or entity to which it is addressed and may
contain confidential and/or privileged material. Any review,
retransmission, dissemination or other use of this information by
persons or entities other than the intended recipient is prohibited. If
you received this in error, please contact the sender and destroy all
copies of this document. Thank you. 

Butler Animal Health Supply

**

 

Quick Event Question

[Chyka, Robert]

We are running Exchange 2003 on Windows Server 2003.  We are fully
patched etc.  We are starting to get a slow growing amount of outbound
SPAM trying to be sent out of our Exchange server and we are looking to
stop it before it gets ugly.

 

We are a verified closed relay host, but I am noticing a weird event for
a specific user in the event log.

 

It is EventId 1708 and the Source is MSExchange Transport

 

The text is:

 

SMTP Authentication was performed successfully with client
"[127.0.0.1]".  The authentication method was "NTLM" and the username
was "xxx"

 

 

 

I didn't know if the 127.0.0.1 was an issue?  Never saw it before.

 

Thanks!!!

RE: Migration and upgrade

[Chyka, Robert]

Hi Adrian,

Do they have a method and toolset to buy for server 2003 and exchange
2003 enterprise to server 2008 enterprise and exchange 2007 enterprise?

Thanks..Bob 

-Original Message-
From: Adrian Crawford [mailto:acrawf...@kirway.com.au] 
Sent: Tuesday, July 14, 2009 7:49 PM
To: MS-Exchange Admin Issues
Subject: RE: Migration and upgrade

I have just moved from SBS 2003 to SBS 2008 along with Exchange.

The best resource I found and used was sbsmigration.com

It had all the steps and processes to move exchange from 2003 to 2008
via a swing out to Temporary exchange server, it worked well and the
$200US was money well spent, at least for my sanity.

Regards

Adrian Crawford

Kirway Constructions P/L
66 Church Street, PO Box 1468, Traralgon VIC 3844, Australia
Ph: +613 5174 0128 Fax: +613 5174 0391
E-mail: acrawf...@kirway.com.au
Visit: www.kirway.com.au

PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL
_

The information contained in this message and or attachments is intended
only for the person or entity to which it is addressed and may contain
confidential and/or privileged material. Any review, retransmission,
dissemination or other use of, or taking of any action in reliance upon,
this information by persons or entities other than the intended
recipient is prohibited. If you received this in error, please contact
the sender and delete the material from any system and destroy any
copies. Thank you.

-Original Message-
From: James Kerr [mailto:cluster...@gmail.com]
Sent: Wednesday, 15 July 2009 5:17 AM
To: MS-Exchange Admin Issues
Subject: Migration and upgrade

Need to migrate exchange 2003 (w/ Win2003) to new server that will be
running exchange 2007 (w/ Win2008). Can I migrate directly to 2007 or
should I install 2003 on the new server, migrate, decomission the old
exchange sever then upgrade to 2007?

James 

RE: Exmerge Question

[Chyka, Robert]

Mailbox is corrupted...these were instructions from Microsoft.

-Original Message-
From: "Eric Woodford" 
To: "MS-Exchange Admin Issues" 
Sent: 7/14/09 5:13 PM
Subject: Re: Exmerge Question

Why are you creating a new mailbox for a user? The old one moldy or
something?

On Tue, Jul 14, 2009 at 1:37 PM, Chyka, Robert  wrote:

>  We need to recreate a fresh mailbox for a user and they have a lot of
> folders that need to be backed up so that we can create a new mailbox for
> them.  Since there are too many folders to export one at a time, I was going
> to exmerge them to a .pst.  I never have used Exmerge and was wondering the
> syntax I would use for a single user to grab their whole mailbox for backup
> while I recreate it.  After the recreating I would want to restore all of
> the contents into the new mailbox.
>
>
>
> Windows 2003 Server running Exchange 2003.
>
>
>
> Thanks for your help…Just didn’t want to screw it up…
>
>
>
> Bob
>

RE: Exmerge Question

[Chyka, Robert]

Will do.

 

Thanks!

 



From: Wulff Jr, Ronald J. [mailto:rwu...@reedsmith.com] 
Sent: Tuesday, July 14, 2009 4:38 PM
To: MS-Exchange Admin Issues
Subject: RE: Exmerge Question

 

Just launch the exmerge.exe and follow the prompts.  It is easy

 

Ronald Wulff Jr 
412.288.3601 
rwu...@reedsmith.com 

Reed Smith LLP 
20 Stanwix St

Suite 1200
Pittsburgh, PA 15222

 

From: Chyka, Robert [mailto:bch...@medaille.edu] 
Sent: Tuesday, July 14, 2009 4:37 PM
To: MS-Exchange Admin Issues
Subject: Exmerge Question

 

We need to recreate a fresh mailbox for a user and they have a lot of
folders that need to be backed up so that we can create a new mailbox
for them.  Since there are too many folders to export one at a time, I
was going to exmerge them to a .pst.  I never have used Exmerge and was
wondering the syntax I would use for a single user to grab their whole
mailbox for backup while I recreate it.  After the recreating I would
want to restore all of the contents into the new mailbox.

 

Windows 2003 Server running Exchange 2003.

 

Thanks for your help...Just didn't want to screw it up...

 

Bob

 

* * * 

 

This E-mail, along with any attachments, is considered confidential and
may well be legally privileged. If you have received it in error, you
are on notice of its status. Please notify us immediately by reply
e-mail and then delete this message from your system. Please do not copy
it or use it for any purposes, or disclose its contents to any other
person. Thank you for your cooperation. 

* * * 

To ensure compliance with Treasury Department regulations, we inform you
that, unless otherwise indicated in writing, any U.S. Federal tax advice
contained in this communication  (including any attachments) is not
intended or written to be used, and cannot be used, for the purpose of
(1) avoiding penalties under the Internal Revenue Code or applicable
state and local provisions or (2) promoting, marketing or recommending
to another party any tax-related matters addressed herein. 

Disclaimer Version RS.US.1.01.03

pdc1

Exmerge Question

[Chyka, Robert]

We need to recreate a fresh mailbox for a user and they have a lot of
folders that need to be backed up so that we can create a new mailbox
for them.  Since there are too many folders to export one at a time, I
was going to exmerge them to a .pst.  I never have used Exmerge and was
wondering the syntax I would use for a single user to grab their whole
mailbox for backup while I recreate it.  After the recreating I would
want to restore all of the contents into the new mailbox.

 

Windows 2003 Server running Exchange 2003.

 

Thanks for your help...Just didn't want to screw it up...

 

Bob

RE: Unreal...Mail Queue is filling up!

[Chyka, Robert]

I am getting a lot of these events in my app log from this ip address:

 

his is an SMTP protocol warning log for virtual server ID 1, connection #18754. 
The remote host "209.97.234.254", responded to the SMTP command "mail" with 
"421 4.5.1 sender mx in an unallocated or reserved network !  ". The full 
command sent was "MAIL FROM:  ".  This may cause the 
connection to fail. 

 

 

 



From: Sherry Abercrombie [mailto:saber...@gmail.com] 
Sent: Thursday, April 09, 2009 9:26 AM
To: MS-Exchange Admin Issues
Subject: Re: Unreal...Mail Queue is filling up!

 

Oh, another thing, on your firewall, don't allow port 25 access or SMTP, POP3 
etc protocols from any addresses except for those that are allowed to send 
email.

On Thu, Apr 9, 2009 at 8:24 AM, Chyka, Robert  wrote:

About 1000 routed vlan

 



From: HELP_PC [mailto:g...@enter.it] 
Sent: Thursday, April 09, 2009 9:22 AM


To: MS-Exchange Admin Issues

Subject: R: Unreal...Mail Queue is filling up!

 

How many clients ?

 

GuidoElia

HELPPC

 

 

____

Da: Chyka, Robert [mailto:bch...@medaille.edu] 
Inviato: giovedì 9 aprile 2009 15.16
A: MS-Exchange Admin Issues
Oggetto: Unreal...Mail Queue is filling up!

Hello,

 

I've been working on this issue since 2:00 yesterday.  We have some machines on 
our network that are compromised and sending or trying to send hundreds of 
thousands of e-mail to domains overseas.  I verified that we are not a open 
relay and that all of our authentication methods are set right.  We are running 
Exchange 2003 Enterprise on a single server.

 

Here is what I did so far:

 

-Disabled port 25 on the firewall for our mail server to start queue cleanup.

-Stopped SMTP on the mail server 

- set up a new connector called SPAM Cleanup and forwarded all mail going thru 
this SMTP connector to a fake ip address

-I bound the sonnector to the SMTP virtual server

-restarted SMTP

-cleaned the queue (almost 350,000 messages)

-turned logging on for smtp at highest level

-found a machine that was compromised by looking at the application log of the 
mail server

-turned it off

-had to re-enable our mail server for people to work who are coming in

-queues refilled back up

 

Is there a easier way to find the compromised hosts on our internal network so 
I don't have to take e-mail down?  I know taking the server down and doing it 
that way is the right way, but I will get my butt kicked today.  We are 
currently on 3 Blacklists now

 

Any suggestions are greatly appreciated.

 

-BC

 

 

 

 




-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic." 
Arthur C. Clarke
Sent from Haslet, TX, United States 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Unreal...Mail Queue is filling up!

[Chyka, Robert]

This is what we have on our ASA

 

access-list acl_out extended permit tcp any host xxx.xxx.xxx.xxx (this is our 
mail server public address) eq smtp

 



From: Sherry Abercrombie [mailto:saber...@gmail.com] 
Sent: Thursday, April 09, 2009 9:26 AM
To: MS-Exchange Admin Issues
Subject: Re: Unreal...Mail Queue is filling up!

 

Oh, another thing, on your firewall, don't allow port 25 access or SMTP, POP3 
etc protocols from any addresses except for those that are allowed to send 
email.

On Thu, Apr 9, 2009 at 8:24 AM, Chyka, Robert  wrote:

About 1000 routed vlan

 



From: HELP_PC [mailto:g...@enter.it] 
Sent: Thursday, April 09, 2009 9:22 AM


To: MS-Exchange Admin Issues

Subject: R: Unreal...Mail Queue is filling up!

 

How many clients ?

 

GuidoElia

HELPPC

 

 



Da: Chyka, Robert [mailto:bch...@medaille.edu] 
Inviato: giovedì 9 aprile 2009 15.16
A: MS-Exchange Admin Issues
Oggetto: Unreal...Mail Queue is filling up!

Hello,

 

I've been working on this issue since 2:00 yesterday.  We have some machines on 
our network that are compromised and sending or trying to send hundreds of 
thousands of e-mail to domains overseas.  I verified that we are not a open 
relay and that all of our authentication methods are set right.  We are running 
Exchange 2003 Enterprise on a single server.

 

Here is what I did so far:

 

-Disabled port 25 on the firewall for our mail server to start queue cleanup.

-Stopped SMTP on the mail server 

- set up a new connector called SPAM Cleanup and forwarded all mail going thru 
this SMTP connector to a fake ip address

-I bound the sonnector to the SMTP virtual server

-restarted SMTP

-cleaned the queue (almost 350,000 messages)

-turned logging on for smtp at highest level

-found a machine that was compromised by looking at the application log of the 
mail server

-turned it off

-had to re-enable our mail server for people to work who are coming in

-queues refilled back up

 

Is there a easier way to find the compromised hosts on our internal network so 
I don't have to take e-mail down?  I know taking the server down and doing it 
that way is the right way, but I will get my butt kicked today.  We are 
currently on 3 Blacklists now

 

Any suggestions are greatly appreciated.

 

-BC

 

 

 

 




-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic." 
Arthur C. Clarke
Sent from Haslet, TX, United States 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Unreal...Mail Queue is filling up!

[Chyka, Robert]

That is funny you ask...  I got promoted a couple months ago and now 2
of my new policies are to get managed AV on all of our clients and to
rip local admin rights off.  With the people that use to run our IT
department, it was a free for all.  Everyone got whatever they wanted.
All that is changing as we speak, but it isn't changed yet!

 



From: Sherry Abercrombie [mailto:saber...@gmail.com] 
Sent: Thursday, April 09, 2009 9:23 AM
To: MS-Exchange Admin Issues
Subject: Re: Unreal...Mail Queue is filling up!

 

Do you run anti-virus on your workstations?  Is it centrally managed?
(User can't turn it off)  Restrict users on local workstations? (Not
allow them to be local administrators)  

On Thu, Apr 9, 2009 at 8:15 AM, Chyka, Robert 
wrote:

Hello,

 

I've been working on this issue since 2:00 yesterday.  We have some
machines on our network that are compromised and sending or trying to
send hundreds of thousands of e-mail to domains overseas.  I verified
that we are not a open relay and that all of our authentication methods
are set right.  We are running Exchange 2003 Enterprise on a single
server.

 

Here is what I did so far:

 

-Disabled port 25 on the firewall for our mail server to start queue
cleanup.

-Stopped SMTP on the mail server 

- set up a new connector called SPAM Cleanup and forwarded all mail
going thru this SMTP connector to a fake ip address

-I bound the sonnector to the SMTP virtual server

-restarted SMTP

-cleaned the queue (almost 350,000 messages)

-turned logging on for smtp at highest level

-found a machine that was compromised by looking at the application log
of the mail server

-turned it off

-had to re-enable our mail server for people to work who are coming in

-queues refilled back up

 

Is there a easier way to find the compromised hosts on our internal
network so I don't have to take e-mail down?  I know taking the server
down and doing it that way is the right way, but I will get my butt
kicked today.  We are currently on 3 Blacklists now

 

Any suggestions are greatly appreciated.

 

-BC

 

 




-- 
Sherry Abercrombie

"Any sufficiently advanced technology is indistinguishable from magic." 
Arthur C. Clarke

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Unreal...Mail Queue is filling up!

[Chyka, Robert]

About 1000 routed vlan

 



From: HELP_PC [mailto:g...@enter.it] 
Sent: Thursday, April 09, 2009 9:22 AM
To: MS-Exchange Admin Issues
Subject: R: Unreal...Mail Queue is filling up!

 

How many clients ?

 

GuidoElia

HELPPC

 

 



Da: Chyka, Robert [mailto:bch...@medaille.edu] 
Inviato: giovedì 9 aprile 2009 15.16
A: MS-Exchange Admin Issues
Oggetto: Unreal...Mail Queue is filling up!

Hello,

 

I've been working on this issue since 2:00 yesterday.  We have some machines on 
our network that are compromised and sending or trying to send hundreds of 
thousands of e-mail to domains overseas.  I verified that we are not a open 
relay and that all of our authentication methods are set right.  We are running 
Exchange 2003 Enterprise on a single server.

 

Here is what I did so far:

 

-Disabled port 25 on the firewall for our mail server to start queue cleanup.

-Stopped SMTP on the mail server 

- set up a new connector called SPAM Cleanup and forwarded all mail going thru 
this SMTP connector to a fake ip address

-I bound the sonnector to the SMTP virtual server

-restarted SMTP

-cleaned the queue (almost 350,000 messages)

-turned logging on for smtp at highest level

-found a machine that was compromised by looking at the application log of the 
mail server

-turned it off

-had to re-enable our mail server for people to work who are coming in

-queues refilled back up

 

Is there a easier way to find the compromised hosts on our internal network so 
I don't have to take e-mail down?  I know taking the server down and doing it 
that way is the right way, but I will get my butt kicked today.  We are 
currently on 3 Blacklists now

 

Any suggestions are greatly appreciated.

 

-BC

 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Unreal...Mail Queue is filling up!

[Chyka, Robert]

Hello,

 

I've been working on this issue since 2:00 yesterday.  We have some
machines on our network that are compromised and sending or trying to
send hundreds of thousands of e-mail to domains overseas.  I verified
that we are not a open relay and that all of our authentication methods
are set right.  We are running Exchange 2003 Enterprise on a single
server.

 

Here is what I did so far:

 

-Disabled port 25 on the firewall for our mail server to start queue
cleanup.

-Stopped SMTP on the mail server 

- set up a new connector called SPAM Cleanup and forwarded all mail
going thru this SMTP connector to a fake ip address

-I bound the sonnector to the SMTP virtual server

-restarted SMTP

-cleaned the queue (almost 350,000 messages)

-turned logging on for smtp at highest level

-found a machine that was compromised by looking at the application log
of the mail server

-turned it off

-had to re-enable our mail server for people to work who are coming in

-queues refilled back up

 

Is there a easier way to find the compromised hosts on our internal
network so I don't have to take e-mail down?  I know taking the server
down and doing it that way is the right way, but I will get my butt
kicked today.  We are currently on 3 Blacklists now

 

Any suggestions are greatly appreciated.

 

-BC

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Anti-SPAM Appliances

[Chyka, Robert]

I was looking at the IronPort myself.  Any input is appreciated...

-Original Message-
From: "Brian Dugas" 
To: "MS-Exchange Admin Issues" 
Sent: 3/13/09 2:10 PM
Subject: Anti-SPAM Appliances

Hello Everyone - 
 
Does anyone out there use the Ironport appliance?  If so, what are your
thoughts.
 

Thanks,

Brian


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Exporting VCards from Outlook

[Chyka, Robert]

Yeah no free ones though.. Oh well might have to bite the bullet and buy one..

thanks

-Original Message-
From: "Martin Blackstone" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 7/11/08 11:32 AM
Subject: RE: Exporting VCards from Outlook

There are a number of tools available that can do this.

Google : outlook bulk vcard export

 

From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Friday, July 11, 2008 7:11 AM
To: MS-Exchange Admin Issues
Subject: Exporting VCards from Outlook

 

We are trying to export vcards from Outlook to one file.  Is there a way to
do this?  Right now it only does it one contact at a time.

 

Thanks for any help..

 

Bob C.

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Exporting VCards from Outlook

[Chyka, Robert]

We are trying to export vcards from Outlook to one file.  Is there a way
to do this?  Right now it only does it one contact at a time.

 

Thanks for any help..

 

Bob C.


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Weird Public Folder Issue

[Chyka, Robert]

Well thanks for the answer but i would up moving everything in her
mailbox to a PST, then i removed her exchange attributes, waited for the
update cycle to finish, recreated her exchange attributs and dumped
everything back in.
 
we dont cache public folders that is why i was confused.  she could
totally get into the public folder but nothing would show up at all
after changing outlook over to 2007.
 
everything looks good now..
 
thanks..Bob



From: Carl Houseman [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 09, 2008 12:39 PM
To: MS-Exchange Admin Issues
Subject: RE: Weird Public Folder Issue



I've noticed something similar since moving to OL 2007 on Vista.  I have
this list and others as PF's and the PF's are cached (in the OST).  When
I click on the PF sometimes the message list comes up empty after a
couple second delay.  Something is timing out.

 

I click away from it and then back to it and everything appears.

 

It's infrequent enough (couple times a day) that it's just a minor
annoyance.  All patched up of course.  I haven't tried un-caching the
PF's but if you're not caching them, that's something you could try.

 

Carl

 

From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 09, 2008 12:25 PM
To: MS-Exchange Admin Issues
Subject: Weird Public Folder Issue

 

We changed a user from Outlook 2003 to 2007, running under Exchange
2003.   The user can see a public folder called xx but when she clicks
on it, the items arent displayed.  Her permissions didnt change at all
and she was able to see all the items for the last 3 years under outlook
2003.  

 

The funny thing is she can see a subcalendar off this public folder and
the items in it.  She can see everything in OWA.

 

We have recreated her outlook profile.  We also ripped office and
reinstalled it.

 

has anyone seen this?  any help is appreciated.

 

thanks..Bob

 

 


 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Weird Public Folder Issue

[Chyka, Robert]

We changed a user from Outlook 2003 to 2007, running under Exchange
2003.   The user can see a public folder called xx but when she clicks
on it, the items arent displayed.  Her permissions didnt change at all
and she was able to see all the items for the last 3 years under outlook
2003.  
 
The funny thing is she can see a subcalendar off this public folder and
the items in it.  She can see everything in OWA.
 
We have recreated her outlook profile.  We also ripped office and
reinstalled it.
 
has anyone seen this?  any help is appreciated.
 
thanks..Bob

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Exchange Failover Product..

[Chyka, Robert]

Hi Everyone,

 

I'm looking for a Exchange 2003 failover software product.  Years ago I
used Double Take at another job and wanted ot see if that was the way to
go.  Basically I want to put another exchange server at another site and
have that box take over if the main exchange server ever goes down or
has issues etc.  we currently have only one exchange box.  Any help is
appreciated...

 

Thanks..

 

Btw we have a 50mbit mpls connection between sites..


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Send Mail to Every Contact in Outlook..

[Chyka, Robert]

Is there a easy way to send e-mail to about 2000 contacts in outlook
asking the contacts to update their phone numbers, addresses etc?  ive
found a couple scripts but before I look at them I was wondering if
there is a way to do it within outlook itself.

 

Any help is appreciated...

 

Thanks...


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Treo 680 and ActiveSync Issue..

[Chyka, Robert]

We have a couple palm 680 treos running Palm OS.  We are getting a weird
error when we try to activesync with Exchange 2003 SP2.  We use SSL for
OWA and I have followed the following Microsoft article method #2:

 

http://support.microsoft.com/?id=817379

 

I set up versamail and did the test everything tested good.  I started
the first activesync on a large mailbox (small inbox, large contacts and
calendar) and it took klike 3 hours.  When I was done the mail came in
ok but the contacts (that said it was syncing contacts for 2 hours
didn't come in only the ones that were on the palm already were there
and same with calendar)

 

I had to manually run activesync and new mail would come in but would
always beep with this error AirSamstateMachine.C 3261 1510.  

 

After researching this it says it has to resync because the account is
not provisioned.  How do I provision his user account and anyone know
the deal with contacts and calendar not making it in?

 

 

Thank you very much for any help..

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Users prompted when opening outlook

[Chyka, Robert]

Or when the drive that holds sysvol becomes full..

-Original Message-
From: "David Mazzaccaro" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/22/08 10:15 AM
Subject: RE: Users prompted when opening outlook

This usually happens to us when users change their passwords or they
enter them incorrectly 4 times.


-Original Message-
From: James Kerr [mailto:[EMAIL PROTECTED] 
Sent: Friday, February 22, 2008 9:30 AM
To: MS-Exchange Admin Issues
Subject: Users prompted when opening outlook

Starting yesterday I have had a few users that when opening Outlook are 
prompted to enter their username and password. When they enter their 
password it doesnt accept it. This morning I have even more users having
the 
same problem. I dont see anything in the event logs that is helpful.
Anyone 
have any ideas what this may be? OS is 2003 and so is Exchange.

Thanks,

James 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: GreyListing...

[Chyka, Robert]

Thanks..appreciate it...

-Original Message-
From: "Andy David" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 10:35 PM
Subject: RE: GreyListing...

Hotfix:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;934709

Reg:
http://technet.microsoft.com/en-us/library/aa998772.aspx

I think the general recommendation is setting it to 120 or more seconds.
Test of course. :)



-Original Message-
From: Chyka, Robert [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 20, 2008 10:26 PM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

Hey andy.  Would you mind sharing the hotfix and reg tweak?

Thanks..

-Original Message-
From: "Andy David" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 10:15 PM
Subject: RE: GreyListing...

Oh and let's not forget the greylisting bug in Exchange/Windows 2003 SP2 ( now 
mitigated by a hotfix and reg tweak).  Without the fix, "legitimate" Exchange 
mailers aren't resending the messages once they get the 4xx response code from 
the receiver and the message disappears until the SMTP service is restarted.

So, regardless whether it's a bug, a mailer that simply doesn't retry, or some 
other reason, legitimate mail can be "lost" or dropped when you decide to 
greylist. To say otherwise, is, well, a misnomer.



-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 20, 2008 9:57 PM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...


"Greylisting only delays legitimate mail.  It will stay in queue and be
sent again.  The notion that Greylisting loses legitimate email is a
misnomer."


Now that's funny. When you have 20 million messages coming to your door 
everyday ( And Jim over there at BB&T has even more than that) from all over 
the world, many from systems in countries that are still using older mail 
systems following RFC 821, I bet you wouldn't say that.


-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 20, 2008 7:45 PM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

Greylisting only delays legitimate mail.  It will stay in queue and be
sent again.  The notion that Greylisting loses legitimate email is a
misnomer.

Legitimate = from a MTA

If expecting to receive email from a non-legitimate, non-queuing
source, such as some sort of custom notification service with no
sending intelligence, etc; it pays to be mindful of what is expected
to be received, and whitelist matching criteria for those messages so
they are not subject to delaying.

The benefits of using Greylisting majorly outweigh the legwork to
whitelist.  Depending on a server's existing load, Greylisting offsets
processing and the bandwidth used for both the transmission of spam as
well as the various DNS checks performed afterward.

I've been Greylisting for 2 years now.  The only notable issue came at
the beginning when certain peoples expectation of instantaneous e-mail
was delayed by 10 minutes that first time before the sender's server
became automatically whitelisted.

HTH

On Wed, Feb 20, 2008 at 3:15 PM, Andy David <[EMAIL PROTECTED]> wrote:
> How much legitimate mail are you dropping?
>
>
>
>
>  -Original Message-
>  From: Thomas Gonzalez [mailto:[EMAIL PROTECTED]
>  Sent: Wednesday, February 20, 2008 2:53 PM
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>  Well, after my email I sent out about the two domains and the one
>  particular domain being hit hard, the JEP(s) along with Trend and IMF I
>  am seeing about a 87% of blocked spam email. Hopefully the end users
>  will be a little happy as I am right now.
>
>  Again thank you all for the responses.
>
>
>  Thomas
>
>
>
>  -Original Message-
>  From: Roger Wright [mailto:[EMAIL PROTECTED]
>  Sent: Wednesday, February 20, 2008 9:10 AM
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>  Thanks for the pointer to JEP(S)!   I've installed it on my church's
>  system and so far it's having a big impact on the spam (>84% blocked),
>  so much so that IMF is only seeing about 5% of what it used to see even
>  with my aggressive 6 (archive) and 4 (junk mail) settings.
>
>  I'm not thoroughly convinced that greylisting is ideal, but it does work
>  and JEP(S) makes it easy and free to implement.
>
>
>  Roger Wright
>  Network Administrator
>  Evatone, Inc.
>  727.572.7076  x388
>  
>
>  When the  TV repairman got married the reception was excellent.
>
>
>
>  -Original Message-
>  From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 11:30 AM
>  To: MS-Exchange Admin Issues

RE: GreyListing...

[Chyka, Robert]

Hey andy.  Would you mind sharing the hotfix and reg tweak?

Thanks..

-Original Message-
From: "Andy David" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 10:15 PM
Subject: RE: GreyListing...

Oh and let's not forget the greylisting bug in Exchange/Windows 2003 SP2 ( now 
mitigated by a hotfix and reg tweak).  Without the fix, "legitimate" Exchange 
mailers aren't resending the messages once they get the 4xx response code from 
the receiver and the message disappears until the SMTP service is restarted.

So, regardless whether it's a bug, a mailer that simply doesn't retry, or some 
other reason, legitimate mail can be "lost" or dropped when you decide to 
greylist. To say otherwise, is, well, a misnomer.



-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 20, 2008 9:57 PM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...


"Greylisting only delays legitimate mail.  It will stay in queue and be
sent again.  The notion that Greylisting loses legitimate email is a
misnomer."


Now that's funny. When you have 20 million messages coming to your door 
everyday ( And Jim over there at BB&T has even more than that) from all over 
the world, many from systems in countries that are still using older mail 
systems following RFC 821, I bet you wouldn't say that.


-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
Sent: Wednesday, February 20, 2008 7:45 PM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

Greylisting only delays legitimate mail.  It will stay in queue and be
sent again.  The notion that Greylisting loses legitimate email is a
misnomer.

Legitimate = from a MTA

If expecting to receive email from a non-legitimate, non-queuing
source, such as some sort of custom notification service with no
sending intelligence, etc; it pays to be mindful of what is expected
to be received, and whitelist matching criteria for those messages so
they are not subject to delaying.

The benefits of using Greylisting majorly outweigh the legwork to
whitelist.  Depending on a server's existing load, Greylisting offsets
processing and the bandwidth used for both the transmission of spam as
well as the various DNS checks performed afterward.

I've been Greylisting for 2 years now.  The only notable issue came at
the beginning when certain peoples expectation of instantaneous e-mail
was delayed by 10 minutes that first time before the sender's server
became automatically whitelisted.

HTH

On Wed, Feb 20, 2008 at 3:15 PM, Andy David <[EMAIL PROTECTED]> wrote:
> How much legitimate mail are you dropping?
>
>
>
>
>  -Original Message-
>  From: Thomas Gonzalez [mailto:[EMAIL PROTECTED]
>  Sent: Wednesday, February 20, 2008 2:53 PM
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>  Well, after my email I sent out about the two domains and the one
>  particular domain being hit hard, the JEP(s) along with Trend and IMF I
>  am seeing about a 87% of blocked spam email. Hopefully the end users
>  will be a little happy as I am right now.
>
>  Again thank you all for the responses.
>
>
>  Thomas
>
>
>
>  -Original Message-
>  From: Roger Wright [mailto:[EMAIL PROTECTED]
>  Sent: Wednesday, February 20, 2008 9:10 AM
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>  Thanks for the pointer to JEP(S)!   I've installed it on my church's
>  system and so far it's having a big impact on the spam (>84% blocked),
>  so much so that IMF is only seeing about 5% of what it used to see even
>  with my aggressive 6 (archive) and 4 (junk mail) settings.
>
>  I'm not thoroughly convinced that greylisting is ideal, but it does work
>  and JEP(S) makes it easy and free to implement.
>
>
>  Roger Wright
>  Network Administrator
>  Evatone, Inc.
>  727.572.7076  x388
>  
>
>  When the  TV repairman got married the reception was excellent.
>
>
>
>  -Original Message-
>  From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 11:30 AM
>  To: MS-Exchange Admin Issues
>  Subject: Re: GreyListing...
>
>  IMF doesnt Greylist, but here is something that wou might find easier to
>  use than ASSP:
>
>  http://www.petri.co.il/greylisting_in_exchange_2003.htm
>
>
>  On Feb 19, 2008 11:03 AM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>  >
>  >
>  >
>  >
>  > Nois that a necessity  to use greylisting?
>  >
>  >
>  >
>  >  ________
>  >
>  >
>  > From: Stefan Jafs [mailto:[EMAIL PROTECTED]
>  >  Sent: Tuesday, February 19, 2008 10:

RE: GreyListing...

[Chyka, Robert]

Well brightmail is killing 98 percent but I want to greylist all the spam I can 
before it hits the MTA...so I'm using both now...jep(s) and brightmail..

-Original Message-
From: "Don Andrews" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 8:15 PM
Subject: RE: GreyListing...

Didn't mean to sound like I was accusing you - just that if you (they)
have Brightmail for anti-spam AND are being overwhelmed by spam, it
seems ineffective (at best).

-----Original Message-
From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 4:45 PM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

Trust me I'm not a symantec fan at all.  That is what was there when I
took the email server over...

-Original Message-
From: "Don Andrews" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 3:26 PM
Subject: RE: GreyListing...

Boy, what an advertisement for Brightmail!

-Original Message-
From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 11:17 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

You can use that with a spam solution already in place like BrightMail
etc right?

-Original Message-
From: Roger Wright [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 10:10 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

Thanks for the pointer to JEP(S)!   I've installed it on my church's
system and so far it's having a big impact on the spam (>84% blocked),
so much so that IMF is only seeing about 5% of what it used to see even
with my aggressive 6 (archive) and 4 (junk mail) settings.  

I'm not thoroughly convinced that greylisting is ideal, but it does work
and JEP(S) makes it easy and free to implement.


Roger Wright
Network Administrator
Evatone, Inc.
727.572.7076  x388


When the  TV repairman got married the reception was excellent.



-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 19, 2008 11:30 AM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

IMF doesnt Greylist, but here is something that wou might find easier to
use than ASSP:

http://www.petri.co.il/greylisting_in_exchange_2003.htm


On Feb 19, 2008 11:03 AM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Nois that a necessity  to use greylisting?
>
>
>
>  
>
>
> From: Stefan Jafs [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:47 AM
>
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>
>
>
> Did you enable IMF?
>
>
>
>
> __
>  Stefan Jafs
>
>
>
>
>
> From: Chyka, Robert [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:35
>  To: MS-Exchange Admin Issues
>  Subject: GreyListing...
>
>
>
>
> Hello,
>
>
>
> I wanted to get some input on the service that is recommended for
> greylisting with Exchange 2003.   my friend has a small office with 40
> mailboxes and they use Symantec Brightmail for Spam filtering.  When 
> running the report for them, I am seeing 98% SPAM hitting the exchange

> box.  I want to reduce this for them and take some stress off of the 
> server.  Looking for a free or very cheap greylist service and how
easy it is to set up.
>
>
>
>
>
> Thanks in advance...
>
>
>
>
>
>
> This email and any attached files are confidential and intended solely

> for the intended recipient(s). If you are not the named recipient you 
> should not read, distribute, copy or alter this email. Any views or 
> opinions expressed in this email are those of the author and do not 
> represent those of Amico Corporation . Warning: Although precautions 
> have been taken to make sure no viruses are present in this email, the

> company cannot accept responsibility for any loss or damage that arise
from the use of this email or attachments.
>
>
>
>
>
>
>



--
ME2

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: GreyListing...

[Chyka, Robert]

Trust me I'm not a symantec fan at all.  That is what was there when I took the 
email server over...

-Original Message-
From: "Don Andrews" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 2/20/08 3:26 PM
Subject: RE: GreyListing...

Boy, what an advertisement for Brightmail!

-----Original Message-
From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 11:17 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

You can use that with a spam solution already in place like BrightMail
etc right?

-Original Message-
From: Roger Wright [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 10:10 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

Thanks for the pointer to JEP(S)!   I've installed it on my church's
system and so far it's having a big impact on the spam (>84% blocked),
so much so that IMF is only seeing about 5% of what it used to see even
with my aggressive 6 (archive) and 4 (junk mail) settings.  

I'm not thoroughly convinced that greylisting is ideal, but it does work
and JEP(S) makes it easy and free to implement.


Roger Wright
Network Administrator
Evatone, Inc.
727.572.7076  x388


When the  TV repairman got married the reception was excellent.



-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 19, 2008 11:30 AM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

IMF doesnt Greylist, but here is something that wou might find easier to
use than ASSP:

http://www.petri.co.il/greylisting_in_exchange_2003.htm


On Feb 19, 2008 11:03 AM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Nois that a necessity  to use greylisting?
>
>
>
>  
>
>
> From: Stefan Jafs [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:47 AM
>
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>
>
>
> Did you enable IMF?
>
>
>
>
> __
>  Stefan Jafs
>
>
>
>
>
> From: Chyka, Robert [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:35
>  To: MS-Exchange Admin Issues
>  Subject: GreyListing...
>
>
>
>
> Hello,
>
>
>
> I wanted to get some input on the service that is recommended for
> greylisting with Exchange 2003.   my friend has a small office with 40
> mailboxes and they use Symantec Brightmail for Spam filtering.  When 
> running the report for them, I am seeing 98% SPAM hitting the exchange

> box.  I want to reduce this for them and take some stress off of the 
> server.  Looking for a free or very cheap greylist service and how
easy it is to set up.
>
>
>
>
>
> Thanks in advance...
>
>
>
>
>
>
> This email and any attached files are confidential and intended solely

> for the intended recipient(s). If you are not the named recipient you 
> should not read, distribute, copy or alter this email. Any views or 
> opinions expressed in this email are those of the author and do not 
> represent those of Amico Corporation . Warning: Although precautions 
> have been taken to make sure no viruses are present in this email, the

> company cannot accept responsibility for any loss or damage that arise
from the use of this email or attachments.
>
>
>
>
>
>
>



--
ME2

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: GreyListing...

[Chyka, Robert]

You can use that with a spam solution already in place like BrightMail
etc right?

-Original Message-
From: Roger Wright [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 20, 2008 10:10 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

Thanks for the pointer to JEP(S)!   I've installed it on my church's
system and so far it's having a big impact on the spam (>84% blocked),
so much so that IMF is only seeing about 5% of what it used to see even
with my aggressive 6 (archive) and 4 (junk mail) settings.  

I'm not thoroughly convinced that greylisting is ideal, but it does work
and JEP(S) makes it easy and free to implement.


Roger Wright
Network Administrator
Evatone, Inc.
727.572.7076  x388


When the  TV repairman got married the reception was excellent.



-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 19, 2008 11:30 AM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

IMF doesnt Greylist, but here is something that wou might find easier to
use than ASSP:

http://www.petri.co.il/greylisting_in_exchange_2003.htm


On Feb 19, 2008 11:03 AM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Nois that a necessity  to use greylisting?
>
>
>
>  
>
>
> From: Stefan Jafs [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:47 AM
>
>  To: MS-Exchange Admin Issues
>  Subject: RE: GreyListing...
>
>
>
>
> Did you enable IMF?
>
>
>
>
> __
>  Stefan Jafs
>
>
>
>
>
> From: Chyka, Robert [mailto:[EMAIL PROTECTED]
>  Sent: Tuesday, February 19, 2008 10:35
>  To: MS-Exchange Admin Issues
>  Subject: GreyListing...
>
>
>
>
> Hello,
>
>
>
> I wanted to get some input on the service that is recommended for
> greylisting with Exchange 2003.   my friend has a small office with 40
> mailboxes and they use Symantec Brightmail for Spam filtering.  When 
> running the report for them, I am seeing 98% SPAM hitting the exchange

> box.  I want to reduce this for them and take some stress off of the 
> server.  Looking for a free or very cheap greylist service and how
easy it is to set up.
>
>
>
>
>
> Thanks in advance...
>
>
>
>
>
>
> This email and any attached files are confidential and intended solely

> for the intended recipient(s). If you are not the named recipient you 
> should not read, distribute, copy or alter this email. Any views or 
> opinions expressed in this email are those of the author and do not 
> represent those of Amico Corporation . Warning: Although precautions 
> have been taken to make sure no viruses are present in this email, the

> company cannot accept responsibility for any loss or damage that arise
from the use of this email or attachments.
>
>
>
>
>
>
>



--
ME2

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: GreyListing...

[Chyka, Robert]

So I would then rip the symantec brightmail off their server and replace
it with this?  Ill take a look at it..

Thanks Michael..

-Original Message-
From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 19, 2008 10:50 AM
To: MS-Exchange Admin Issues
Subject: Re: GreyListing...

You could run ASSP on the same box, configuring it to only perform
greylisting.  It would have little to no impact on the performance of
the box.

ASSP is a Perl-based anti-spam application.  It has many other
features that can also deter connections and therefor off-set load on
your server

www.asspsmtp.org


On Feb 19, 2008 10:35 AM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
>
> Hello,
>
>
>
> I wanted to get some input on the service that is recommended for
> greylisting with Exchange 2003.   my friend has a small office with 40
> mailboxes and they use Symantec Brightmail for Spam filtering.  When
running
> the report for them, I am seeing 98% SPAM hitting the exchange box.  I
want
> to reduce this for them and take some stress off of the server.
Looking for
> a free or very cheap greylist service and how easy it is to set up.
>
>
>
>
>
> Thanks in advance...
>
>
>



-- 
ME2

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: GreyListing...

[Chyka, Robert]

Nois that a necessity  to use greylisting?

 



From: Stefan Jafs [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 19, 2008 10:47 AM
To: MS-Exchange Admin Issues
Subject: RE: GreyListing...

 

Did you enable IMF?

 

__
Stefan Jafs

 

From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, February 19, 2008 10:35
To: MS-Exchange Admin Issues
Subject: GreyListing...

 

Hello,

 

I wanted to get some input on the service that is recommended for
greylisting with Exchange 2003.   my friend has a small office with 40
mailboxes and they use Symantec Brightmail for Spam filtering.  When
running the report for them, I am seeing 98% SPAM hitting the exchange
box.  I want to reduce this for them and take some stress off of the
server.  Looking for a free or very cheap greylist service and how easy
it is to set up.

 

 

Thanks in advance...

 

 

This email and any attached files are confidential and intended solely
for the intended recipient(s). If you are not the named recipient you
should not read, distribute, copy or alter this email. Any views or
opinions expressed in this email are those of the author and do not
represent those of Amico Corporation . Warning: Although precautions
have been taken to make sure no viruses are present in this email, the
company cannot accept responsibility for any loss or damage that arise
from the use of this email or attachments.

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

GreyListing...

[Chyka, Robert]

Hello,

 

I wanted to get some input on the service that is recommended for
greylisting with Exchange 2003.   my friend has a small office with 40
mailboxes and they use Symantec Brightmail for Spam filtering.  When
running the report for them, I am seeing 98% SPAM hitting the exchange
box.  I want to reduce this for them and take some stress off of the
server.  Looking for a free or very cheap greylist service and how easy
it is to set up.

 

 

Thanks in advance...


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Just about done with migration...

[Chyka, Robert]

Makes sense.  Cool yes my exchange box sits inside my firewall and
actually the nating is done on our pix so I really just have to change
the ip address of the new server to match the old one after I take it
offline.  Is it same to change the netbios name of the new server so I
don't have to mess with owa too much or should I just use a new url?

 

Thanks!

 



From: Kennedy, Jim [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 13, 2008 3:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Just about done with migration...

 

Just in time to migrate to Server 2008 and Exchange 2007!

 

Just flip the IP address on the old exchange server to the new one when
you are done. That is the simplest solution. I am assuming it is inside
your firewall, so you have an internal IP address on them...you
could also just change the firewall/router rule that is sending port 25
to that server.you can do this without touching your MX records or
calling your ISP. It would be easier that way.

 

 

 

From: Chyka, Robert [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 13, 2008 3:30 PM
To: MS-Exchange Admin Issues
Subject: Just about done with migration...

 

Hello All,

 

I'm just about done with a NT 4 and exchange 5.5 migration to windows
server 2003 and exchange 2003.  I used vmware to do the domain migration
and kept the domain name the same.  Exchange is still at 5.5 but is
functioning under the new 2003 domain in native mode after I ran
forestprep, domainprep, and configures the ADC from the exchange 2003
cd.  I am bringing up a new exchange box and im going to transfer the
mailboxes to the new box and decommissioning the old exchange server.
It will have a new netbios name and ip address.  Our external dns is
hosted by our ISP and our MX record sits there.  Do I need to add
another mx record with a weight of 20 for the new exchange box and when
the old one is ready to be removed change the new MX record to a weight
of 10 with our isp pointing to the new url or am I over thinking this
and no changes will have to be made?

 

 

Thanks for your input..

 

 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Just about done with migration...

[Chyka, Robert]

Hello All,

 

I'm just about done with a NT 4 and exchange 5.5 migration to windows
server 2003 and exchange 2003.  I used vmware to do the domain migration
and kept the domain name the same.  Exchange is still at 5.5 but is
functioning under the new 2003 domain in native mode after I ran
forestprep, domainprep, and configures the ADC from the exchange 2003
cd.  I am bringing up a new exchange box and im going to transfer the
mailboxes to the new box and decommissioning the old exchange server.
It will have a new netbios name and ip address.  Our external dns is
hosted by our ISP and our MX record sits there.  Do I need to add
another mx record with a weight of 20 for the new exchange box and when
the old one is ready to be removed change the new MX record to a weight
of 10 with our isp pointing to the new url or am I over thinking this
and no changes will have to be made?

 

 

Thanks for your input..


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Problems Sending Mail to Different Sites...

[Chyka, Robert]

Just curious...how did you find the bot sending all the SPAM?

-Original Message-
From: Carl Houseman [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 04, 2008 11:49 AM
To: MS-Exchange Admin Issues
Subject: RE: Problems Sending Mail to Different Sites...

Standard e-mail troubleshooting applies.

e.g. from the console of the machine which actually sends the mail to
remote
servers
1. Verify correct nslookup of MX servers for the domain
2. Telnet to port 25 of MX servers and enter SMTP commands and watch
responses received

The problem may be completely unrelated to the blacklisting - stuff
happens.

Carl 

-Original Message-
From: Desmond [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 04, 2008 11:12 AM
To: MS-Exchange Admin Issues
Subject: Problems Sending Mail to Different Sites...

Last week we had a computer that had a botnet and was sending out spam.
After being notified by several of our receipients that were were being
blacklisted,  I corrected the problem.  As of this morning using
DNSSTUFF
and the references provided me we are no longer on these lists.

Now we are receiving messages from our customers referring to...

Delivery to the following recipients has been delayed... and
Could not deliver the message in the time limit specified...

Even got on the phone with one of our customer and sure enough they are
not
going through.  

HELP!



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Exchange 5.5 Server listed on SPAM list as BACKSCATTER

[Chyka, Robert]

Hello,

 

We have an exchange 5.5 server and it is listed on a Spam list as having
backscatter or sender callouts.  I understand what backscatter is but
not sure how to stop or block it on Exchange 5.5.can anyone point me
in the right direction?

 

Thanks...


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: weird outbound mail

[Chyka, Robert]

Thanks mike...  I got it now... I was worried because there are a ton going 
outbound  when I look at scanmail's live view of the queues its scanning..

-Original Message-
From: "Micheal Espinola Jr" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 7:07 PM
Subject: Re: weird outbound mail

Postmaster NDRs (bounces) that are sent from your MTA (mail server)
typically come from a <> address (aka null) to prevent mail loops that
might otherwise compound the issue you are experiencing.

On Jan 27, 2008 4:40 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
>
>
>
> Ok thanks…   it is very strange for the originator it says <> for each entry
> but in the outbound queue in trend scanmail it says postmaster  weird..
>
>
>
>  
>
>
> From: John Cook [mailto:[EMAIL PROTECTED]
>  Sent: Sunday, January 27, 2008 4:38 PM
>
>
>  To: MS-Exchange Admin Issues
>  Subject: Re: weird outbound mail
>
>
>
>
>
>
>
>
>
>
> I just do it manually for each connection that's hung up.
>  Painstakingly sent to you from my Blackberry.
>
>  - Original Message -
>  From: Chyka, Robert <[EMAIL PROTECTED]>
>  To: MS-Exchange Admin Issues 
>  Sent: Sun Jan 27 16:32:16 2008
>  Subject: RE: weird outbound mail
>
>  Is there a command line utility to do this?
>
>  Thanks again..
>
>  -Original Message-
>  From: "John Cook" <[EMAIL PROTECTED]>
>  To: "MS-Exchange Admin Issues" 
>  Sent: 1/27/08 4:30 PM
>  Subject: Re: weird outbound mail
>
>  I check mine every day and purge them.
>  Painstakingly sent to you from my Blackberry.
>
>  - Original Message -
>  From: Chyka, Robert <[EMAIL PROTECTED]>
>  To: MS-Exchange Admin Issues 
>  Sent: Sun Jan 27 16:16:50 2008
>  Subject: RE: weird outbound mail
>
>  You manually clear them from the queue?  How often?
>
>  -Original Message-
>  From: "Eric Wittenberg" <[EMAIL PROTECTED]>
>  To: "MS-Exchange Admin Issues" 
>  Sent: 1/27/08 4:04 PM
>  Subject: Re: weird outbound mail
>
>  I usually go thru and clear these messages /w no ndr.
>
>  --
>  Eric Wittenberg MCSE, ASE, CET
>
>  On Jan 27, 2008 1:53 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>  >
>  >
>  >  It is probably a good idea to disable these to minimize the outbound
>  > traffic?
>  >
>  >
>  >  --
>  >
>  > *From:* Eric Wittenberg [mailto:[EMAIL PROTECTED]
>  > *Sent:* Sunday, January 27, 2008 3:44 PM
>  > *To:* MS-Exchange Admin Issues
>  > *Subject:* Re: weird outbound mail
>  >
>  >
>  >
>  > Sounds like NDR reports that are failing to be sent because they are to
>  > non-existant domains. They are from failed to be delivered spam.
>  >
>  >
>  > --
>  > Eric Wittenberg MCSE, ASE, CET
>  >
>  > On Jan 27, 2008 1:26 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>  >
>  >
>  >
>  > Hi,
>  >
>  >
>  >
>  > A client of mine has an old exchange 5.5 server (upgrade ready for March)
>  > and there is tons of mail in the outbound mail queue from
>  > [EMAIL PROTECTED]  they don't have a postmaster email account and im
>  > wondering where this account is coming from and how to track it down.  It
>  > looks like spam going out.  Is there any way to easily find out what is
>  > going on with this and track down what is generating this e-mail?
>  >
>  >
>  >
>  > Any help is appreciated…
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>  >
>
>  ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
>  ~ http://www.sunbeltsoftware.com/Ninja~
>
>  ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
>  ~ http://www.sunbeltsoftware.com/Ninja~
>
>  CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
> attached to or with this Notice is intended only for the person or entity to
> which it is addressed and may contain Protected Health Information (PHI),
> confidential and/or privileged material.  Any review, transmission,
> dissemination, or other use of, and taking any action in reliance upon this
> information by persons or entities other than the intended recipient without
> the express written consent of the sender are prohibited.
>  This information may be protected by the Health Insurance Portability an

RE: weird outbound mail

[Chyka, Robert]

Ok thanks...   it is very strange for the originator it says <> for each
entry but in the outbound queue in trend scanmail it says postmaster
weird..

 



From: John Cook [mailto:[EMAIL PROTECTED] 
Sent: Sunday, January 27, 2008 4:38 PM
To: MS-Exchange Admin Issues
Subject: Re: weird outbound mail

 






I just do it manually for each connection that's hung up.
Painstakingly sent to you from my Blackberry.

- Original Message -
From: Chyka, Robert <[EMAIL PROTECTED]>
To: MS-Exchange Admin Issues 
Sent: Sun Jan 27 16:32:16 2008
Subject: RE: weird outbound mail

Is there a command line utility to do this?

Thanks again..

-Original Message-
From: "John Cook" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 4:30 PM
Subject: Re: weird outbound mail

I check mine every day and purge them.
Painstakingly sent to you from my Blackberry.    

- Original Message -
From: Chyka, Robert <[EMAIL PROTECTED]>
To: MS-Exchange Admin Issues 
Sent: Sun Jan 27 16:16:50 2008
Subject: RE: weird outbound mail

You manually clear them from the queue?  How often?

-Original Message-
From: "Eric Wittenberg" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 4:04 PM
Subject: Re: weird outbound mail

I usually go thru and clear these messages /w no ndr.

--
Eric Wittenberg MCSE, ASE, CET

On Jan 27, 2008 1:53 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:

>
>
>  It is probably a good idea to disable these to minimize the outbound
> traffic?
>
>
>  --
>
> *From:* Eric Wittenberg [mailto:[EMAIL PROTECTED]
> *Sent:* Sunday, January 27, 2008 3:44 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: weird outbound mail
>
>
>
> Sounds like NDR reports that are failing to be sent because they are
to
> non-existant domains. They are from failed to be delivered spam.
>
>
> --
> Eric Wittenberg MCSE, ASE, CET
>
> On Jan 27, 2008 1:26 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
> Hi,
>
>
>
> A client of mine has an old exchange 5.5 server (upgrade ready for
March)
> and there is tons of mail in the outbound mail queue from
> [EMAIL PROTECTED]  they don't have a postmaster email account and im
> wondering where this account is coming from and how to track it down.
It
> looks like spam going out.  Is there any way to easily find out what
is
> going on with this and track down what is generating this e-mail?
>
>
>
> Any help is appreciated...
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
attached to or with this Notice is intended only for the person or
entity to which it is addressed and may contain Protected Health
Information (PHI), confidential and/or privileged material.  Any review,
transmission, dissemination, or other use of, and taking any action in
reliance upon this information by persons or entities other than the
intended recipient without the express written consent of the sender are
prohibited. 
This information may be protected by the Health Insurance Portability
and Accountability Act of 1996 (HIPAA), and other Federal and Florida
laws.  Improper or unauthorized use or disclosure of this information
could result in civil and/or criminal penalties.
~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
attached to or with this Notice is intended only for the person or
entity to which it is addressed and may contain Protected Health
Information (PHI), confidential and/or privileged material. Any review,
transmission, dissemination, or other use of, and taking any action in
reliance upon this information by persons or entities other than the
intended recipient without the express written consent of the sender are
prohibited. This information may be protected by the Health Insurance
Portability and Accountability Act of 1996 (HIPAA), and other Federal
and Florida laws. Improper or unauthorized use or disclosure of this
information could result in civil and/or criminal penalties. 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: weird outbound mail

[Chyka, Robert]

Is there a command line utility to do this?

Thanks again..

-Original Message-
From: "John Cook" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 4:30 PM
Subject: Re: weird outbound mail

I check mine every day and purge them. 
Painstakingly sent to you from my Blackberry. 

- Original Message -
From: Chyka, Robert <[EMAIL PROTECTED]>
To: MS-Exchange Admin Issues 
Sent: Sun Jan 27 16:16:50 2008
Subject: RE: weird outbound mail

You manually clear them from the queue?  How often?

-Original Message-
From: "Eric Wittenberg" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 4:04 PM
Subject: Re: weird outbound mail

I usually go thru and clear these messages /w no ndr.

-- 
Eric Wittenberg MCSE, ASE, CET

On Jan 27, 2008 1:53 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:

>
>
>  It is probably a good idea to disable these to minimize the outbound
> traffic?
>
>
>  --
>
> *From:* Eric Wittenberg [mailto:[EMAIL PROTECTED]
> *Sent:* Sunday, January 27, 2008 3:44 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: weird outbound mail
>
>
>
> Sounds like NDR reports that are failing to be sent because they are to
> non-existant domains. They are from failed to be delivered spam.
>
>
> --
> Eric Wittenberg MCSE, ASE, CET
>
> On Jan 27, 2008 1:26 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
> Hi,
>
>
>
> A client of mine has an old exchange 5.5 server (upgrade ready for March)
> and there is tons of mail in the outbound mail queue from
> [EMAIL PROTECTED]  they don't have a postmaster email account and im
> wondering where this account is coming from and how to track it down.  It
> looks like spam going out.  Is there any way to easily find out what is
> going on with this and track down what is generating this e-mail?
>
>
>
> Any help is appreciated…
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

CONFIDENTIALITY STATEMENT: The information transmitted, or contained or 
attached to or with this Notice is intended only for the person or entity to 
which it is addressed and may contain Protected Health Information (PHI), 
confidential and/or privileged material.  Any review, transmission, 
dissemination, or other use of, and taking any action in reliance upon this 
information by persons or entities other than the intended recipient without 
the express written consent of the sender are prohibited.  
This information may be protected by the Health Insurance Portability and 
Accountability Act of 1996 (HIPAA), and other Federal and Florida laws.  
Improper or unauthorized use or disclosure of this information could result in 
civil and/or criminal penalties.
~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: weird outbound mail

[Chyka, Robert]

You manually clear them from the queue?  How often?

-Original Message-
From: "Eric Wittenberg" <[EMAIL PROTECTED]>
To: "MS-Exchange Admin Issues" 
Sent: 1/27/08 4:04 PM
Subject: Re: weird outbound mail

I usually go thru and clear these messages /w no ndr.

-- 
Eric Wittenberg MCSE, ASE, CET

On Jan 27, 2008 1:53 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:

>
>
>  It is probably a good idea to disable these to minimize the outbound
> traffic?
>
>
>  --
>
> *From:* Eric Wittenberg [mailto:[EMAIL PROTECTED]
> *Sent:* Sunday, January 27, 2008 3:44 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: weird outbound mail
>
>
>
> Sounds like NDR reports that are failing to be sent because they are to
> non-existant domains. They are from failed to be delivered spam.
>
>
> --
> Eric Wittenberg MCSE, ASE, CET
>
> On Jan 27, 2008 1:26 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:
>
>
>
> Hi,
>
>
>
> A client of mine has an old exchange 5.5 server (upgrade ready for March)
> and there is tons of mail in the outbound mail queue from
> [EMAIL PROTECTED]  they don't have a postmaster email account and im
> wondering where this account is coming from and how to track it down.  It
> looks like spam going out.  Is there any way to easily find out what is
> going on with this and track down what is generating this e-mail?
>
>
>
> Any help is appreciated…
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: weird outbound mail

[Chyka, Robert]

It is probably a good idea to disable these to minimize the outbound
traffic?

 



From: Eric Wittenberg [mailto:[EMAIL PROTECTED] 
Sent: Sunday, January 27, 2008 3:44 PM
To: MS-Exchange Admin Issues
Subject: Re: weird outbound mail

 

Sounds like NDR reports that are failing to be sent because they are to
non-existant domains. They are from failed to be delivered spam.


-- 
Eric Wittenberg MCSE, ASE, CET 

On Jan 27, 2008 1:26 PM, Chyka, Robert <[EMAIL PROTECTED]> wrote:

 

Hi,

 

A client of mine has an old exchange 5.5 server (upgrade ready for
March) and there is tons of mail in the outbound mail queue from
[EMAIL PROTECTED]  they don't have a postmaster email account and im
wondering where this account is coming from and how to track it down.
It looks like spam going out.  Is there any way to easily find out what
is going on with this and track down what is generating this e-mail?

 

Any help is appreciated...

 

 

 





 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

weird outbound mail

[Chyka, Robert]

Hi,

 

A client of mine has an old exchange 5.5 server (upgrade ready for
March) and there is tons of mail in the outbound mail queue from
[EMAIL PROTECTED]  they don't have a postmaster email account and im
wondering where this account is coming from and how to track it down.
It looks like spam going out.  Is there any way to easily find out what
is going on with this and track down what is generating this e-mail?

 

Any help is appreciated...


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~