Thanks Scott.

I've emailed you the file.

We do have a few ALLOWIP's, but I they are for IP's we own.

I checked the W log files and it looks like they are coming in through web messaging 
(god knows how they are sending that much email through web messaging) under several 
IP's ranging from Nigeria to Israel.  I blocked those IP's within Imail "Control 
Access".

How can I make Hijack work with webmessaging?

b

---------- Original Message ----------------------------------
From: "R. Scott Perry" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date:  Wed, 26 Mar 2003 18:10:23 -0500

>
>>And the log files have not held anything today.  Everything went through
>>as "OK" with juat a couple not local users.
>
>Note that Declude Hijack allows unlimited E-mail to local users, and 
>doesn't count that towards a user's quota.
>
>>But I see that [EMAIL PROTECTED] now has about 300 outgoing spam messages
>>in the queue.
>
>Do you have any "ALLOWIP" lines in your hijack.cfg file?
>
>Is the user sending these E-mails via SMTP, or web messaging (which would 
>not be scanned by default)?
>
>Could you E-mail me the log file (off-list to [EMAIL PROTECTED])?
>                                   -Scott
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>---
>[This E-mail was scanned for Viruses and Spam by Richmond.com]
>
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to