Tons of emails in Queue

[julesNDC]

Last week the email server started to act bizarre. Had to reboot for emails to come in. Today we still have the same problem and when I took a look at the queue I saw a ton of emails sitting IN messages waiting to be routed, pending submission and SMTP connectors. I deleted the queues but the keep coming back fasterthan I can delete them. When looking at the senders on these emails, they are either non deliverable notification or weird email addresses. I am wondering if someone is using the exchange server for spoofing.

PLEASE HELP!!!!!

 

[julesNDC]

This is probably getting old for you guys but I tried what everything that was suggested here and still no luck.

I blocked on my firewall all incoming on port 25. The only ports 25 I can see now are from the server out to about 40 IP’s (all pointing to Taiwan, Kuwait, China, etc)
I stopped the SMTP service and deleted everything in the Queue but as soon as I start the service again it right away builds a list of 25 connectors (to Taiwan, Kuwait, China, etc) and within a blink of an eye there are around 2000 emails in the Queues. They all are Postmaster@mydomain.com.

No matter what I do it look like the server is loading with postmasters.

Could it be a PC on the network that is infected with a virus or a mass mailer worm?

 

[snootalope]

That may very well be.. Do you have a virus scanner on that machine?

if not, or to try another alternative, goole "Trend Micro Housecall" and do their free online scanner. It's quick and very effective.

 

[58sniper]

And if so, make sure a file level scanner is not scanning the mdbdata folder. Bad, bad, evil things happen when you do that.

But this sounds like something is infected somewhere.

Pat Richard, MCSE MCSA:Messaging CNA
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[julesNDC]

Good news. Problem solved and here is what I did.

-Stopped all connections on the firewall using port 25
-Re-started the SMTP Service
-Emptying the Queue folder in the vsi 1 folder did not helped, I had to delete emails within the queue
-Deleted the BadMail folder (9 GB !!!)
-Re-opened port 25 on the router.

It’s been 3 days and it’s still working good.

Thank you al for your help.