Tuesday, February 21, 2012 10:50 AM
Dear friends , i am facing this fromlem in my exchange 2010 for some users.
exchange sends a mail to users and says that you have sent spam mails out
i am giving the reply mail also.
To: Ganapati N.S
Subject: Returned mail: see transcript for details
Dear user email@example.com,
Your account has been used to send a large amount of spam messages during the recent week.
Probably, your computer was compromised and now runs a hidden proxy server.
Please follow the instructions in order to keep your computer safe.
The domainname.com team.
Friday, February 24, 2012 1:31 AM
First go to www.mxtoolbox.com and check to see if you domain is blacklisted. Put your domain in the lookup box and click lookup. then click the BlackList link to see if you are listed. Then get yourself de-listed.
Second use your firewall to limit outbound emails to your mailservers only. If you don't know how to do this, post your firewall information here (make, model and code version if possible) and we'll see what we can do.
Third, turn on verbose logging on your receive connectors and then check to see where most of the connections are comming from.
Hope that helps.
Saturday, February 25, 2012 4:55 AMits not listed under any black list......
Thanks Ajay Singh MCITP Exchange IBM Tivoli, HP DPS,
Tuesday, February 28, 2012 12:39 AM
Do you recongnise the who the email is from, I suspect that, that is spam itelf.
Have you got AV/AS spam deployed on Exch? Running and up to date?
AV deploye on your desktops?
Check the message header of the message and see where it's come from.