Question : NDR spam on exchange 2003

Hi

I have a problem with a customer server, I cant stop the exchange queues getting larger and larger.
I think we have been NDR attack.

I have searched internet and tried everything i can find but they still keep coming.

I have checked if open relay, checked al PC and servers for viruses, and also  gone though sembee cleaning up after NDR attach.

I seem to be getting thousand of email in queue every few mins.  I have blocked port 25 and now using a none existing smart host but still getting  lots. I have even ran Microsoft tool -  Exchange Support Tools / Aqadmcli ....... this delete queue but they then starting filling up again, so i ran again but keeps happening

Has anyone any ideas please





 

Answer : NDR spam on exchange 2003

Did you follow my advice to the letter?