We have been hit very hard lately.
Last week we had 350,000 files in /spool.
I have contacted an attorney in Virginia-- where they have anti spam
law, that lets you sue.
The spammer lives in VA
I need to make sure I am reading my log files correctly.
One day I counted over 17,000 spam emails: FROM:<[EMAIL PROTECTED]> from
one source.
The way I counted was to replace the from email address with other text
via MS Word.
Total replaced was 17,000.
Question is: does each email address that I replaced:
FROM:<[EMAIL PROTECTED]> equal one SPAM email?
Sincerely,
David Kaleky
www.FLORIDA.com
Tel: 561-995-1656
FAX: 425-799-5963
Here is a sample from log
20010812 000046 127.0.0.1 SMTPD (3B5A014E) [212.250.240.12] EHLO
newhope
20010812 000046 127.0.0.1 SMTPD (3B5A014E) [212.250.240.12] MAIL
FROM:<[EMAIL PROTECTED]>
20010812 000046 127.0.0.1 SMTPD (3B5A014E) [212.250.240.12] RCPT
TO:<[EMAIL PROTECTED]>
20010812 000046 127.0.0.1 SMTPD (3B5A014E) [212.250.240.12]
d:\IMAIL\spool\Dff6e14e.SMD 2131
20010812 000047 127.0.0.1 SMTP (996) processing
d:\IMAIL\spool\Qff6e14e.SMD
20010812 000048 127.0.0.1 SMTP (996) ldeliver florida.com
Tloqy-main (1) [EMAIL PROTECTED] 2212
20010812 000048 127.0.0.1 SMTP (996) finished
d:\IMAIL\spool\Qff6e14e.SMD status=1
20010812 000054 127.0.0.1 SMTPD (3B5C014E) [207.247.24.244]
connect 210.206.226.253 port 30167
20010812 000055 127.0.0.1 SMTPD (3B5C014E) [210.206.226.253] EHLO
kmcs.greencross.com
20010812 000055 127.0.0.1 SMTPD (39CD00D2) [207.247.24.244]
connect 210.206.226.253 port 30184
20010812 000055 127.0.0.1 SMTPD (3B5C014E) [210.206.226.253]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000055 127.0.0.1 SMTPD (39CD00D2) [210.206.226.253] EHLO
kmcs.greencross.com
20010812 000055 127.0.0.1 SMTPD (39CD00D2) [210.206.226.253]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000057 127.0.0.1 SMTPD (39CE00D2) [207.247.24.244]
connect 210.210.18.17 port 3895
20010812 000057 127.0.0.1 SMTPD (39CE00D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000057 127.0.0.1 SMTPD (39CE00D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000057 127.0.0.1 SMTPD (3B5D014E) [207.247.24.244]
connect 210.210.18.17 port 3898
20010812 000058 127.0.0.1 SMTPD (3B5D014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000058 127.0.0.1 SMTPD (3B5D014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000153 127.0.0.1 SMTPD (3B5E014E) [207.247.24.244]
connect 210.210.18.17 port 4113
20010812 000153 127.0.0.1 SMTPD (3B5E014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000153 127.0.0.1 SMTPD (3B5E014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000154 127.0.0.1 SMTPD (3B5F014E) [207.247.24.244]
connect 210.210.18.17 port 4126
20010812 000154 127.0.0.1 SMTPD (3B5F014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000154 127.0.0.1 SMTPD (3B5F014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000154 127.0.0.1 SMTPD (39CF00D2) [207.247.24.244]
connect 210.210.18.17 port 4138
20010812 000155 127.0.0.1 SMTPD (39CF00D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000155 127.0.0.1 SMTPD (39CF00D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000155 127.0.0.1 SMTPD (3B60014E) [207.247.24.244]
connect 210.210.18.17 port 4145
20010812 000155 127.0.0.1 SMTPD (095803CE) [207.247.24.244]
connect 210.210.18.17 port 4146
20010812 000155 127.0.0.1 SMTPD (3B60014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000155 127.0.0.1 SMTPD (095803CE) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000155 127.0.0.1 SMTPD (39D000D2) [207.247.24.244]
connect 210.210.18.17 port 4149
20010812 000155 127.0.0.1 SMTPD (3B60014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000156 127.0.0.1 SMTPD (095803CE) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000156 127.0.0.1 SMTPD (39D000D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000156 127.0.0.1 SMTPD (090203CC) [207.247.24.244]
connect 210.210.18.17 port 4151
20010812 000156 127.0.0.1 SMTPD (39D000D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000156 127.0.0.1 SMTPD (090203CC) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000156 127.0.0.1 SMTPD (3B61014E) [207.247.24.244]
connect 210.210.18.17 port 4158
20010812 000156 127.0.0.1 SMTPD (090203CC) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000156 127.0.0.1 SMTPD (3B61014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000157 127.0.0.1 SMTPD (3B61014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000157 127.0.0.1 SMTPD (39D100D2) [207.247.24.244]
connect 210.210.18.17 port 4163
20010812 000157 127.0.0.1 SMTPD (090303CC) [207.247.24.244]
connect 210.210.18.17 port 4164
20010812 000157 127.0.0.1 SMTPD (39D100D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000157 127.0.0.1 SMTPD (090303CC) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000157 127.0.0.1 SMTPD (39D100D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000157 127.0.0.1 SMTPD (090303CC) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000158 127.0.0.1 SMTPD (39D200D2) [207.247.24.244]
connect 210.210.18.17 port 4172
20010812 000158 127.0.0.1 SMTPD (39D200D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000158 127.0.0.1 SMTPD (39D200D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000159 127.0.0.1 SMTPD (39D300D2) [207.247.24.244]
connect 210.210.18.17 port 4191
20010812 000200 127.0.0.1 SMTPD (39D300D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000200 127.0.0.1 SMTPD (39D300D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000201 127.0.0.1 SMTPD (39D400D2) [207.247.24.244]
connect 210.210.18.17 port 4201
20010812 000201 127.0.0.1 SMTPD (39D400D2) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000201 127.0.0.1 SMTPD (3B62014E) [207.247.24.244]
connect 210.210.18.17 port 4203
20010812 000202 127.0.0.1 SMTPD (3B62014E) [210.210.18.17] EHLO
prdmsweb01.gate2biz.net
20010812 000202 127.0.0.1 SMTPD (39D400D2) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000202 127.0.0.1 SMTPD (3B62014E) [210.210.18.17]
unacceptable mail address in MAIL FROM:<[EMAIL PROTECTED]>
20010812 000204 127.0.0.1 SMTPD (39D500D2) [207.247.24.244]
connect 128.121.215.227 port 4776
20010812 000205 127.0.0.1 SMTPD (39D500D2) [128.121.215.227] EHLO
s0215.pm0.net
20010812 000205 127.0.0.1 SMTPD (39D500D2) [128.121.215.227] MAIL
From:<[EMAIL PROTECTED]>
20010812 000205 127.0.0.1 SMTPD (39D500D2) [128.121.215.227] RCPT
To:<[EMAIL PROTECTED]> NOTIFY=FAILURE
20010812 000205 127.0.0.1 SMTPD (39D500D2) [128.121.215.227]
d:\IMAIL\spool\Dffbd0d2.SMD 3367
20010812 000206 127.0.0.1 SMTP (1820) processing
d:\IMAIL\spool\Qffbd0d2.SMD
20010812 000206 127.0.0.1 SMTP (1820) ldeliver florida.com
hndltr77-main (1) [EMAIL PROTECTED] 3448
20010812 000206 127.0.0.1 SMTP (1820) finished
d:\IMAIL\spool\Qffbd0d2.SMD status=1
20010812 000217 127.0.0.1 SMTPD (39D600D2) [207.247.24.244]
connect 207.247.24.244 port 2095
20010812 000220 127.0.0.1 SMTPD (39D700D2) [207.247.25.144]
connect 200.14.239.164 port 23248
20010812 000220 127.0.0.1 SMTPD (39D700D2) [200.14.239.164] EHLO
racafe.racafe.com
20010812 000221 127.0.0.1 SMTPD (39D700D2) [200.14.239.164] MAIL
FROM:<[EMAIL PROTECTED]>
PS. Great Hotel and Condo Deals *WorldWide* are found at http://www.FLORIDA.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
