>> "[EMAIL PROTECTED]".  They are likely sending out spam.
>
>Is it possible for me to isolate who this is?

You can find out what IP address they are coming from.  To do so, take a look at your 
log files, and look for the line "SMTPD(########) ... connect xxx.xxx.xxx.xxx port 
yyyy" line just before the spams are sent out (making sure that the "########", which 
identifies the SMTPD process, matches the lines where the spam is sent).

Next, you find out who owns that IP address (you can use our tools at 
http://www.declude.com/tools to help you; go to the "Whois" and enter the IP address 
there to find out who owns the IP block).  Then, contact them and tell them they have 
a spammer connecting to your server and you want them to stop.  Then, the spammer will 
get his account killed and create a new one, and start spamming through you again 
until you close your open relay.


--
                      -Scott

Declude: Anti-virus and Anti-spam solutions for IMail.  http://www.declude.com
--

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to