You receive alerts that a virus or a spam message or mass mailer originated from an IP address that is under your control. You need to know what to do about the problem. Your organization may be on a blacklist.
Take the following actions to determine whether the problem originated from your organization:
For instructions on how to determine the origin of an email message, see the following Frequently Asked Questions (FAQ) page:
To determine whether your Exchange server is an open relay, read the following Microsoft articles:
Your Windows Help files also contain information to help you enable SMTP logs so that you can track SMTP commands that your SMTP virtual server receives. You can enable these logs to help identify the sources of the messages.