Announcement

Collapse
No announcement yet.

How to remove unwanted SMTP connectors ?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to remove unwanted SMTP connectors ?

    Hello,
    When I open "Queues" under "System Manager" tab , It shows big list of SMTP connector's. 95 % of those connectors are domains orignating from spammers.
    Here i attach the image with marked sample connector. How can I remove these junks ?

    Last edited by sco1984; 5th April 2007, 10:01.
    All in 1
    Solaris,Linux & Windows admin + networking.

  • #2
    Re: How to remove unwanted SMTP connectors ?

    You can't.

    This is normal behaviour for Exchange. It creates a queue for each domain that it has to send to. Each queue is temporary and will disappear by itself.

    You probably see loads because your server is dealing with lots of spam, and is replying to the effect that the email address that the spam tried to get to, does not exist. But because (usually) the spam reply address also does not exist, your queues will stay in place for the standard 2 days before the Exchange Server gives up.

    RobbyB

    Comment


    • #3
      Re: How to remove unwanted SMTP connectors ?

      That doesn't look like normal behaviour and would be something I would investigate.

      Have you looked at the messages in the queues to see what they are?
      If they are from [email protected] then it could be NDR spam, or it could be Out of Office responses.

      Is this Exchange 2003? If so, you should enable recipient filtering and tarpit to deal with the NDR spam.

      If the messages look like they are going to legitimate users, then your server may have been compromised. It could be an authenticated relay attack.

      Take a look at my spam cleanup article: http://exchange.sembee.info/2003/smtp/spam-cleanup.asp

      Simon.
      Last edited by Sembee; 16th August 2011, 09:55. Reason: URL Correction
      --
      Simon Butler
      Exchange MVP

      Blog: http://blog.sembee.co.uk/
      More Exchange Content: http://exchange.sembee.info/
      Exchange Resources List: http://exbpa.com/
      In the UK? Hire me: http://www.sembee.co.uk/

      Sembee is a registered trademark, used here with permission.

      Comment


      • #4
        Re: How to remove unwanted SMTP connectors ?

        I'd say it is normal behaviour - for a server under attack by Spam

        So I suppose that makes it abnormal behaviour!

        And you are right Sembee, he or she does need to sort it out and short of a commercial Spam product, your article is a great start.

        robbyb

        Comment


        • #5
          Re: How to remove unwanted SMTP connectors ?

          Originally posted by Sembee View Post
          Is this Exchange 2003? If so, you should enable recipient filtering and tarpit to deal with the NDR spam.
          Some e-mails are with NDR when I perform search for all e-mails in the perticular SMTP connector. I can delete mails from [email protected] mycompany, but can not delete those actual SPAM's. Damn ! .... We how ever blocked 2 major IP ranges in the block list. I think I really need to inplement gateway level anti spam .

          Best practice is to put "SendMail" Server as a front end server and from there forward mails to Exchange 2003, but not a good practice...Hehe !!
          All in 1
          Solaris,Linux & Windows admin + networking.

          Comment

          Working...
          X