>I just noticed rather large log files since i upgraded to 7.06 from version
>6 (80mb log files, where they are usally no bigger than a meg or two).
>most of the entries look like this:
>
>20020416 000837 127.0.0.1 IMAP4 (00000BB4) sending "* 5 FETCH (UID
>273462310"
>20020416 000837 127.0.0.1 IMAP4 (00000BB4) sending " "
>20020416 000837 127.0.0.1 IMAP4 (00000BB4) sending "FLAGS (\ANSWERED
>\SEEN)"
>20020416 000837 127.0.0.1 IMAP4 (00000BB4) sending ")
My guess is that you have IMAP debugging enabled. I don't do much with
IMAP, bit if you have IMAP enabled, this would appear to be typical
(although likely debug level) logging.
>is my server being used by a spammer?
No -- at least not from this piece of the logs. IMAP is for retrieving
mail, which spammers don't usually need to do.
>Am I a victim of some sort of hack?
I doubt it.
>I've it set up to "relay mail for local host only"
That's bad.
To make sure that you are not an open relay, you can either use IMail's
"Relay for addresses" (in which case you would enter a list of "safe" IP
addresses that your users may come from; anyone not coming from those safe
IPs would need to use SMTP AUTH), or "No mail relay" (which really means
that everyone must use SMTP AUTH). Note that relay setting apply only to
outgoing E-mail, so no matter what your settings are, your users will still
be able to get mail. In your situation, this won't reduce the log files
though, as it only affects SMTP, and you're seeing IMAP hits.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
