Just to follow on your point (and hopefully solve a specific problem I am
having) the log files have been chock-ful of lines like this:
11:20 00:00 SMTPD(08470274) [63.10.99.40] ERR domain.com invalid user
<[EMAIL PROTECTED]
11:20 00:00 SMTPD(08470274) [63.10.99.40] RCPT To:<[EMAIL PROTECTED]>
11:20 00:00 SMTPD(08470274) [63.10.99.40] ERR domain.com invalid user
<[EMAIL PROTECTED]
11:20 00:00 SMTPD(08470274) [63.10.99.40] RCPT To:<[EMAIL PROTECTED]>
11:20 00:00 SMTPD(08470274) [63.10.99.40] ERR domain.com invalid user
<[EMAIL PROTECTED]
11:20 00:00 SMTPD(08470274) [63.10.99.40] RCPT To:<[EMAIL PROTECTED]>
We are talking about 1 per second all day!
I have taken all the usual precautions that the manual says to take and if I
understand from these log files, the mail is not being relayed. However, the
constant hammering is causing my server and network problems. Everytime I
add another ip address to the excluded list in the mail relay list they
change their ip!! If anyone has a solution to this I would be very grateful.
Thanks,
Ben
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 20, 2000 3:26 PM
Subject: Re: [IMail Forum] Spamming
> > What is the best way to prevent being spammed?
>
> To prevent being spammed, you can use filters, or add more advanced spam
> control such as our Declude JunkMail ( http://www.declude.com ) or IMGate
> http://imgate.meiway.com ).
>
> If you are looking to prevent your server from being hijacked, just
remember
> that you have to use "Relay for addresses". You will probably need to use
> SMTP AUTH as well, if you don't know the IP addresses of everyone using
your
> server.
>
> > and how does email work that is addressed to someone else or some other
> > domain and I recieve it?
>
> If a spammer tries to use your IMail server to send mail to other domains
> ("hijacks" your mail server), they will only succeed if you haven't set up
> your server to "Relay for Addresses".
>
> Spammers may use another mail server to send spam to someone on your
domain,
> that is addressed ("To:" SMTP header) to a fake or legitimate address
(such
> as [EMAIL PROTECTED]), but that is routed to your domain (via the SMTP
> envelope). For that, you would need to look at the top paragraph.
> -Scott
>
> Declude: Anti-spam and Anti-virus solutions for IMail.
> http://www.declude.com
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
