Re: [IMail Forum] Queue problem in Imail 8.05

[serge]

I monitored the spool, identified some spam message while they are still in 
the spool, and looked in the Qxxxx.smd file to find the user account that 
authenticated the session
deleted the account and restarted the smtp and queue service (the spammer 
can continue to send spam even if the account is deleted if session is 
already authenticated)


----- Original Message ----- 
From: "Yatin Shah (QualiSpace, Sales)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 15, 2004 10:49 AM
Subject: RE: [IMail Forum] Queue problem in Imail 8.05


So now what is the way to find out the spammer? It's really a big
problem. Anybody can help?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of serge
Sent: Wednesday, September 15, 2004 4:17 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Queue problem in Imail 8.05
The analyzer uses the From user (ccan be forged)
not the account used to authenticat the session
that info is simply not available in the imail logs (the auth are in the
logs but cannot be linnked to the smtp/d processes)
an analyzer cannot create information that is not available in the logs
the info is only available in the Q.smd files, and once the message is
processed, there is no way to track what account sent it
----- Original Message ----- 
From: "Rod Dorman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 14, 2004 9:25 PM
Subject: Re: [IMail Forum] Queue problem in Imail 8.05


On Tuesday, September 14, 2004, 16:10:36, serge wrote:
We had a similar issue 2 weeks back
The main issue for us was to determine the account the spammer was
using to authenticate
The imail log does not allow you to trace this info
Sure  it  does.  Run  the  IMail Log Analyzer and look for a user
that's
sending thousands of e-mails.
--
[EMAIL PROTECTED]     "The avalanche has already started, it is too
Rod Dorman              late for the pebbles to vote." - Ambassador
Kosh

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/