Reply to: Len Conrad
Re: [IMail Forum] Discovering spam relayers on Thursday 2:33:57 PM
>>What the best way to discover if anyone has ever used my server to relay spam?
L> The Imail log files
L> If it was a "large" amount of spam, you will see that the Imail log
L> file for that day or two (if the spamming spanned 24:00 oclock) will
L> have been noticeably bigger than you avg log file size.
L> Then go look in one of these candidate/suspect log files, and just
L> read through looking for MAIL FROM: sender@senderdomain that appears
L> repeatedly and in great numbers.
The kill.lst file is very good for rejecting library attacks...
A log grows much less if you reject for example '[EMAIL PROTECTED]',
for example, if you see this as the sender in the log who is
doing the attacking. @senderdomain in the log file should have
the same effect.
--
Roger Heath
advanced internet desktop: www.activatordesk.com
antivirus antispam email : www.activatormail.com
master internet index : www.infogrid.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/