>Could this be a spamer's attempt to probe my server to relay capabilities?
>
>-------------Begin log snippet--------------
>05:21 20:22 SMTPD(049E01D8) [0.0.0.0] connect 66.187.133.80 port 3329
>05:21 20:22 SMTPD(049E01D8) send error 10054
>05:21 20:22 SMTPD(049E01D8) send error 10054
>-------------End log snippet--------------
No, it is not. the "send error 10054" means that the connection was
reset. So they connected to your mailserver, and then immediately
disconnected. The only information they can get from doing this is your
SMTP greeting (which has the host name in it, and the number of SMTP
connections). So there is some information they could gather, but it has
little use.
>Answer:
>No PTR records exist for 66.187.133.80. [Neg TTL=600 seconds]
Interestingly, an IMail server responds at this address. It's a small world!
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
