Groups | Blog | Home
all groups > iis smtp nntp > april 2005 >

iis smtp nntp : Lots of Sender Unspecified Messages in Queue


markj
4/20/2005 1:39:02 PM
Running Windows 2000 IIS/SMTP
Since last week, the inetpub\mailroot\queue folder fills up with lots
(300-400 at a time) of emails that are zero bytes in size. When I look at the
these messages, the from address has "Sender Unspecified". The "empty" emails
eventually disappear.
markj
4/22/2005 6:56:03 AM
According to dnsreport.com the servers (there are 2 showing the same
symptoms)are not open for relay. All of the IP addresses are external (i.e.
nothing to do with me)
How can I check if it is a virus/worm on another machine?

[quoted text, click to view]
Peter D. Hipson
4/22/2005 8:33:50 AM
Open server, perhaps?

Look at the origin IP, is it yours?

Look at the destination, do you know who they are?

Most likely someone is spamming through you, or there is a virus/worm
infection on a machine on your network.

On Wed, 20 Apr 2005 13:39:02 -0700, "markj"
[quoted text, click to view]

PeterD, the Darkstar Network
To email, fix my address!
Peter D. Hipson
4/25/2005 10:25:34 AM
On Fri, 22 Apr 2005 06:56:03 -0700, "markj"
[quoted text, click to view]

Uh, do a virus scan? Look into AVG, they are good. Can you post a
complete set of unedited headers here? The reason why is that if all
the IPs are external, then you must have an open server. Either you
have missed something in the headers that is a clue, of there is
something fishy about dnsreport.com's scan. (Not them, just that it
missed something...)
PeterD, the Darkstar Network
To email, fix my address!
Peter D. Hipson
4/25/2005 10:29:45 AM
I don't see anything at DNSREPORT.COM that tests for open servers/open
relays. Try running an open relay site to test your installation.

On Fri, 22 Apr 2005 06:56:03 -0700, "markj"
[quoted text, click to view]

PeterD, the Darkstar Network
To email, fix my address!
AddThis Social Bookmark Button