>We are seeing hundreds of these entries in our logs
>, coming from web >messaging on one of our local computers to our mail server. Yet, it doesn't >appear any messaging is being done? What could this be? assume the worst, block that Class C at your edge router >20020607 223330 127.0.0.1 IWEBMSG (844) Info - 216.180.13.110 >Mozilla/4.0 (compatible; MSIE 5.01; Windows 98) GET >/Xac939d98cbc9c99bc99f721ea7c4/menu.8064.cgi?mbx=Main HTTP/1.1. >20020607 223330 127.0.0.1 IWEBMSG (844) Request processed with no >referer and user agent 216.180.13.110. >20020607 223426 127.0.0.1 SMTPD (0378014E) [216.180.13.2] connect >216.180.13.2 port 2170 >20020607 223526 127.0.0.1 SMTPD (0379014E) [216.180.13.2] connect >216.180.13.2 port 2175 >20020607 223626 127.0.0.1 SMTPD (037A014E) [216.180.13.2] connect >216.180.13.2 port 2178 dig -x 216.180.13.2 ; <<>> DiG 8.3 <<>> -x ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUERY SECTION: ;; 2.13.180.216.in-addr.arpa, type = ANY, class = IN ;; ANSWER SECTION: 2.13.180.216.in-addr.arpa. 1D IN PTR ntserve.sharpcom.com. ;; AUTHORITY SECTION: 13.180.216.in-addr.arpa. 1D IN NS ns1.HiWAAY.net. 13.180.216.in-addr.arpa. 1D IN NS ns2.HiWAAY.net. ;; ADDITIONAL SECTION: ns1.HiWAAY.net. 1D IN A 216.180.99.6 ns2.HiWAAY.net. 1D IN A 216.180.122.6 ;; Total query time: 14500 msec ;; FROM: mgw1.meiway.com to SERVER: default -- 212.73.210.69 ;; WHEN: Mon Jun 10 14:31:12 2002 ;; MSG SIZE sent: 43 rcvd: 155 Len www.menandmice.com/DNS-training : DNS Training BIND8NT.MEIway.com : ISC BIND for NT4 & W2K IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
