If it was being generated at a rapid rate, you could run a message track on the server, and skip specifying a username. If you do a track for a small period of time, you should be able to eyeball the results (it will return up to 1000) for any stand-out traffic.
/G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst Sent: Wednesday, January 10, 2007 4:25 PM To: Exchange Discussions Subject: RE: There's a pest in my nest Last week a PC started generating spam at the speed McDonalds cooks hamburgers. They were going out via the Exchange front end, so I need to check there. Regards, Orin Rehorst -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Discussions, Exchange (PHES) Sent: Wednesday, January 10, 2007 10:50 AM To: Exchange Discussions Subject: RE: There's a pest in my nest Monitor your Firewall for outbound activity on TCP port 25? Most spammers are unknowingly doing it and are rarely sending through your server, their PC will be infected with something or have a SMTP server on it. Also, you can also block all outbound port 25 traffic except from your known SMTP servers. Bob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Orin Rehorst Posted At: Wednesday, January 10, 2007 10:48 AM Posted To: ExchangeDiscussions Conversation: There's a pest in my nest Subject: There's a pest in my nest What's easiest way to capture/monitor outbound email to find out who's spamming? (Someone is.) TIA Orin Rehorst _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. ___________________NOTICE____________________________ This electronic mail transmission, including any attachments, contains confidential information of Bain & Company, Inc. ("Bain") and/or its clients. It is intended only for the person(s) named, and the information in such e-mail shall only be used by the person(s) named for the purpose intended and for no other purpose. Any use, distribution, copying or disclosure by any other persons, or by the person(s) named but for purposes other than the intended purpose, is strictly prohibited. If you received this transmission in error, please notify the sender by reply e-mail and then destroy this e-mail. Opinions, conclusions and other information n this message that do not relate to the official business of Bain shall be understood to be neither given nor endorsed by Bain. When addressed to Bain clients, any information contained in this e-mail shall be subject to the terms and conditions in the applicable client contract. _______________________________________ _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
