Sounds like NDR spam. This is where emails are sent to your server with an invalid email address on purpose, to make the server bounce the email message. The email address that they are being bounced back to is the real recipient that the spammer wants to target.
Deleting the account will not really help as Exchange needs to use postmaster@ for special activities with Exchange. There are a couple of things that you can do to clean up the queues. I have outlined two techniques on my web site at http://www.amset.info/exchange/spam-cleanup.asp >From a preventative point of view, using Exchange 2003 you can filter out non-existent users using a built in feature. (http://www.amset.info/exchange/filterunknown.asp). This feature does make your server vulnerable to directory harvest attacks, but there is a hotfix available from Microsoft that creates a tar pit to slow an attack of this kind down. You could also get a third party product that will do the same thing. Simon. -- Simon Butler MCP, MCSA, MVP:Exchange Senior Systems Administrator Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset-it.com w: www.amset.info -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ron G. Knox Sent: 11 April 2005 02:50 To: Exchange Discussions Subject: Postmaster Account All I have the postmaster account being bombarded by spam so I deleted the account and still have my mail queues loaded up with mail to this account. I go in and delete the mail queues but still am getting loaded up even with the account deleted. I have Exchange 2003 SP1, Win2k3 server. One I am wondering is there a way to block all mail coming to this post master account?? Two is there a easy way to dump these queues other than using the exchange admin and deleting the messages individually?? Thanks in Advance Ronk _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
