>After further investigation, I have found out that
>someone in the internet is using my IMAIL SMTP server
>to send out spam email.
You seem surprised. If you have your IMail set up to allow anyone to send
mail through it, they will. You need to use IMail's "Relay for Addresses"
or "No mail relay" settings, or else spammers can freely send mail through
your server.
>Here is the header of one of the spam email:
>
>Received: from mx07.hotmail.com [217.37.205.177] by
>template.priceindex.net with ESMTP
> (SMTPD32-6.00) id A2D395022E; Sat, 08 Jun 2002 06:12:51 -0700
217.37.205.177 is a computer in the UK, which also happens to be listed in
many spam databases.
>How can I find out whether this person is one of the
>user under the domains that I host?
You can't, unless you have required SMTP AUTH, which I doubt you did.
>Can I tighten up my IMAIL security to avoid this? Thanks
IMail's SMTP Security options have a number of relaying choices. Of them,
only 2 can be used safely (the rest cause you to be an open relay). The
two safe options are "Relay for Addresses" and "No Mail Relay".
If you use IMail's "Relay for addresses", you would enter a list of "safe"
IP addresses that your users may come from; anyone not coming from those
safe IPs would need to use SMTP AUTH. If you use "No mail relay", everyone
must use SMTP AUTH to relay mail. Note that relay settings apply only to
outgoing E-mail, so no matter what your settings are, your users will still
be able to get mail.
So to reiterate: "Relay for Addresses" or "No Mail Relay" are safe;
everything else will get you listed in a number of spam databases.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
