Need some advice from anyone who has ideas. I've inherited en Exchange server that isn't located in a DMZ or ourside the local network. We're working on aproject to change that, but for now it's the architecture we have to deal with. Over the past few days a few machines on the local netowrk have gotten infected wiht some sort of virus that is hitting our local Exchange server and sending out spam. I've adjusted the queue to hold the email until we can find the source. My question is, can someone tell me a way to find the local IP address of the mahcine that is sending the spam? Ive tried using message tracker in Exchnage 2003, but it doesn't give me an IP address anywhere I can find. Does anyone have ideas how I can isolate and find the computer (or computers) on our local network that is sending this spam? Thanks for any help you can give. Terry Brewer

You should be able to see the Client IP in your SMTP logfiles. Logging the SMTP Service Jesper Bernle | Microsoft Community Contributor 2011 Awardee

Hi You can use Exmon exchange 2003 to monitor your client MAPI connection. You can download it from this. http://www.microsoft.com/download/en/details.aspx?id=11461 This guide will be useful to you. Terence Yu TechNet Community Support

Hi You can use Exmon exchange 2003 to monitor your client MAPI connection. You can download it from this. http://www.microsoft.com/download/en/details.aspx?id=11461 This guide will be useful to you. Terence Yu TechNet Community Support

Hi Do you have anything to update your issue ?Terence Yu TechNet Community Support