I'm seeing a number of messages in the queue with a status of ready similar to the one listed below. A great many of thesemessages are porn related and I'm trying to determine where the mail is being generated. The MessageSourceName is DSN but I'm undertain what that means or if I can use it to track down the issue. The messages are marked delayed and in the past I have removed them all from the queue without sendind a NDR but then more appeared the next day when I checked again. Any help would be greatly appreciated. If I've posted this entry in the wrong forum, please direct me to the correct location Thanks. Jim Identity : Servername\2816290\8509109Subject : Undeliverable: You are nominated for a Ph.dInternetMessageId : <44438119-fdfc-463c-b815-a3aaef83ba97>FromAddress : <>Status : ReadySize : 11370BMessageSourceName : DSNSourceIP : 255.255.255.255SCL : -1DateReceived : 11/15/2008 8:10:15 PMExpirationTime : 11/17/2008 8:10:15 PMLastError : 400 4.4.7 Message delayedRetryCount : 0Queue : Servername\2816290Recipients : IsValid : TrueObjectState : Unchanged

Hi Jim, From your information, I think that it is a Delivery Status Notification (DSN) message which generated on your server as the original message cannot be delivered due to Undeliverable: You are nominated for a Ph.d. In order to get the original message, I suggest you perform following method to export the DSN message: 1. Run Get-Message command on the server to get the a list of Message and remember the Identity of the DSN message 2. Run Suspend-Message Identity of the DSN message 3. Run Export-Message Identity of the DSN message to export the message 4. Open the exported message by using Notepad, we are able to know the Message ID of the original message and its message ID. You can also paste the DSN message here or send to me at v-mishen@microsoft.com for analyze. In addition, please ensure your Exchange server is not open relay by referring following articles: http://technet.microsoft.com/en-us/library/aa997170.aspx http://msexchangeteam.com/archive/2006/12/28/432013.aspx Mike