Scott: Thanks again for your comments. Yes, I have SBS2000 on the same server as IMail is on (using both the Firewall and Proxy Server). IMail's SMTP port is 26 (using port 25 for the SBS SMTP port). I can change the port for both SMTP servers, but I'm wondering why I would need to do this - do they not resolve themselves automatically? And why would we have the option of deciding which port to use if I can only use default port 25?
I'm going to pose the similar question at isaserver.org and will post their input for the edification of those that are also using ISAServer. Thanks again, Bruce -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, June 07, 2002 5:21 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Ascertaining true sender from header information >Thanks for your analysis of the header information. Interesting (or oddly) >enough, most of our messages have the IP 127.0.0.1 in the first Received >line. Could this be a fault in my setup of IMail or our server OS (SBS 2000 >with ISA Server using the Firewall and Proxy Server)? Having the 127.0.0.1 in the Received: header of your E-mail means that IMail received the E-mail from something else on the local server. If the firewall or proxy server caused that, they are broken (unless they are running on the IMail server). However: >Scott, this is the header information I show for you: > >Received: from list.ipswitch.com [127.0.0.1] by tonerworld.com with ESMTP > (SMTPD32-7.07) id A560BF01BA; Fri, 07 Jun 2002 14:28:00 -0700 Something is broken. list.ipswitch.com is *not* 127.0.0.1. You have something running that is passing on the name of the remote mailserver, but not recording its IP. That's not good. There is no way to track down spammers that way, and there is no way to use IMail's anti-relay settings (although whatever is causing the odd behavior might have its own anti-relay settings). Do you have IMail set to listen on a port other than the standard SMTP port 25? That would indicate that you have some sort of software running to interfere with the connection, which would at least mean that the software was partially behaving. But if it is going to break the IP address, it should at least add its own Received: header to include the correct IP address (as SMTP-based virus scanners will normally do). I can't think of any way that this could happen, without requiring you to change the IMail SMTP port. -Scott Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
