exchange 2000 queue NDR

[vttech]

I have exchange 2000 installed on Windows 2000 server sp4

How do I prevent the Non Delivery Report from sending the report to an outside mail?

How can I tell who is sending a message that is in the queue?




Newbie in search of knowledge

 

[brontosaurus]

From Exchange System Manager, go into Global Setting, Internet Message Format. Right click on Default, go to the Advanced tab, and uncheck "allow delivery reports".
To tell who is sending a message, go into the smtp server instance under whatever exchange server you need to look at, right click on the queue you want and enumerate messages.

 

[vttech]

Thanks One thing when I try to enumerate the queue I get enumerate messages from the queue node in the right pane

I did some research and it stated that
Note that you can only reenumerate a queue that you have managed previously. If you have not enumerated a queue previously, the Details pane displays the following message: "Enumerate messages from the queue node."

How can I correct this issue?/

Newbie in search of knowledge

 

[brontosaurus]

Enumerate the queue from the left hand pane by right clicking on the queue and choosing Enumerate 100 messages.

 

[vttech]

When I right click on the queue I don't get the option to enumerate 100 messages but if I click on each message then I can perform that task but only for the one message not a group. Am I missing a setting??

Newbie in search of knowledge

 

[vttech]

Let me correct that statement.. It seems that exchange is creating a queue for all the outgoing messages and they are beginning with Default SMTP connector then the domain they are heading. How do I get all these messages to go into one queue so that I can enumerate 100 messages? and not have to do them one by one

Newbie in search of knowledge

 

[brontosaurus]

You really can't do that. Under normal circumstances, messages will be flying through the appropriate queues and you wouldn't be able to see them for more than a second. Only time you'll get a real good look is when there's a bottleneck.

 

[vttech]

I know something was wrong because our ISP stated that our SMTP port activity was real
high and that they had received complaints

After some research I found that we had 15000 Bad Mails a day. Thus we were sending out
NDR to other Servers via the internet

Steps taken to solve the issue

1.Under Global Settings --> Internet Message Formats --> Default --> Properties -->Advanced Tab
Unchecked "Allow delivery reports”, "Allow non-delivery reports"
The only option that is selected here is "Preserve sender's display name on message"


2. Created a mail enabled group called "No internet Email" and added the postmaster account to that group

3. Created a connecter called "Default SMTP connector" and associated the
Default SMTP Virtual Server to that connector.

4. Added the group to the "Reject messages from:" Thus stopping the postmaster account
from sending out NDRs to other server in an effort to slow down out going traffic.

Results:

SMTP outside traffic has slowed down.

Issue:

The bad mail server is still filled with NDR but only 100 a day


The Queue is filled outgoing emails with a Connection State of Retry



Questions

How can I track down the source of the issue?

How can I stop this from happening in the future?

What are your thoughts on the matter?


Newbie in search of knowledge

 

[vttech]

I figure out that reverse non-delivery report attack is my issue. I read the following article

http://support.microsoft.com/kb/909005

but the steps involve relate to a fix for exchange 2003. How can I solve this is under exchange 2000? my eyes are tired of researching this issue so maybe I missed something.

Newbie in search of knowledge