Highlighted
Absent Member.
Absent Member.
1214 views

SMTP Send Queues

Hi,

Our external email quit working, and we noticed that the SMTP Send Queue was at 180,000, and smtp receive queue was at 2,500. When viewing the gwia send folder these were all spam emails, and mainly from one staff member. When logging in as that user the items were not in sent items. Our SMTP relay is disabled except for photocopiers. How can we find where these emails came from? We think one of our clients must have a something on their staff laptop, or is it possible the groupwise server got a virus?

Thanks
Labels (2)
0 Likes
3 Replies
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: SMTP Send Queues

Hi,

Most likely the staff member has had their username and password compromised, typically from people falling prey to phishing attacks, and those details are being used to authenticate to your GWIA for the purposes of relaying spam.

Change the staff member's password immediately and try make it a stronger password. Check for malware on the staff's laptop.

Delete the spam from the send queue. Perhaps stop/start the GWIA after this for good measure.

Check to ensure that you have not been blacklisted due to the sending out of spam messages.

Almost always this sort of thing is an end user's account gone rogue.

Let us know how it goes.

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
Highlighted
Absent Member.
Absent Member.

Re: SMTP Send Queues

Hi

That seems to have been it.

Thanks
0 Likes
Highlighted
Micro Focus Expert
Micro Focus Expert

Re: SMTP Send Queues

Hi,

Glad that your issue is sorted out. Thanks for reporting back 🙂

Cheers,
Laura Buckley

Views/comments expressed here are entirely my own.
If you find this post helpful, please show your appreciation and click on "Like" below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.