Wierd Session User
Ok what I have is this: When I look at the sessions under my default SMTP virtual server I see hundreds of users with my server IP address as their user name and everyone has a different from IP. We did have an incursion recently where something like 14,000 spam emails were trying to be sent through our Exchange 2003 server using this very same user name. I have no idea of how to stop this since it looks like this user ID is authenticating. Any advice would really be appreciated.
September 5th, 2007 7:26pm

Run a network monitor on the exchange server or if you have a networking department, ask where the traffic is coming from. This should allow you to track down what client is infected, or what IP address to block.
Free Windows Admin Tool Kit Click here and download it now
September 6th, 2007 10:54pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics