>I have about 4000+ files in my spool. They each have a unique address that
>they are being delivered to and they all have the same message (attached
>below). Can someone tell me what this is and how do I stop it from
>continuing. I thank you in advance. Jason
A spammer hijacked your mail server. You run an open, which means that
while you may charge your customers to use your mail server, you let
non-customers (such as this spammer) use your mail server for free.
The best way to fix it is to check "Relay mail for Addresses" (on the SMTP
Security tab of IMail Administrator), entering all IP addresses that your
users may be coming from. If you don't know what IP address someone will
be coming from, they can use SMTP AUTH.
>Received: from ti.cz [198.142.60.175] by Web Mail
> (SMTPD32-6.06 EVAL) id ABA83A00C8; Sat, 19 May 2001 00:50:48 -0400
FYI, this line shows that your host name is "Web Mail" -- that's not a
valid host name. It should be a fully qualified domain name (such as
webmail.com, if that's your domain). You could use "WebMail" (no space)
which would still violate the RFC, but would be much better than having the
space in there (quite a few people use one word for the host name).
Also, this line lets you know that the spammer was coming from 198.142.60.175.
-Scott
Declude: Anti-spam and Anti-virus solutions for IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
