[IMail Forum] SPAM Realy! Help!

[Dominic Maraglia]

Hello,   We are running Imail 6.04 on win2k sever.  I have been examining our logs and a see a *huge* volume of entries such as those listed below.  Okay, clearly our Imail server is being used as a SPAM rely.   SMTP relay is set for "Local Users Only"   SMTP AUTH and VRFY are disabled   What else can I possibly do to prevent this!?   Thank you!   Dominic Maraglia     06:21 08:55 SMTPD(0728004E) [206.160.1.66] HELO email.msn.com 06:21 08:55 SMTPD(0728004E) [206.160.1.66] MAIL FROM: <[EMAIL PROTECTED]> 06:21 08:55 SMTPD(0728004E) [206.160.1.66] RCPT TO: <[EMAIL PROTECTED]> 06:21 08:55 SMTPD(0728004E) [206.160.1.66] c:\IMAIL\spool\D4c7204e.SMD 2721 06:21 08:55 SMTP-(000005BC) processing c:\IMAIL\spool\Q4c7204e.SMD 06:21 08:55 SMTP-(000005BC) Trying aol.com (0) 06:21 08:55 SMTP-(000005BC) Connect aol.com [64.12.137.152:25] (1) 06:21 08:55 SMTP-(000005BC) 220-rly-xi01.mx.aol.com ESMTP mail_relay_in-xi1.5; Fri, 21 Jun 2002 11:55:33 -0400 06:21 08:55 SMTP-(000005BC) 220-America Online (AOL) and its affiliated companies do not 06:21 08:55 SMTP-(000005BC) 220-     authorize the use of its proprietary computers and computer 06:21 08:55 SMTP-(000005BC) 220-     networks to accept, transmit, or distribute unsolicited bulk 06:21 08:55 SMTP-(000005BC) 220      e-mail sent from the internet.   06:21 08:55 SMTPD(0728004E) [206.160.1.66] HELO email.msn.com 06:21 08:55 SMTPD(0728004E) [206.160.1.66] MAIL FROM: <[EMAIL PROTECTED]> 06:21 08:55 SMTPD(0728004E) [206.160.1.66] RCPT TO: <[EMAIL PROTECTED]> 06:21 08:55 SMTPD(0728004E) [206.160.1.66] c:\IMAIL\spool\D4c7204e.SMD 2721 06:21 08:55 SMTP-(000005BC) processing c:\IMAIL\spool\Q4c7204e.SMD 06:21 08:55 SMTP-(000005BC) Trying aol.com (0) 06:21 08:55 SMTP-(000005BC) Connect aol.com [64.12.137.152:25] (1) 06:21 08:55 SMTP-(000005BC) 220-rly-xi01.mx.aol.com ESMTP mail_relay_in-xi1.5; Fri, 21 Jun 2002 11:55:33 -0400 06:21 08:55 SMTP-(000005BC) 220-America Online (AOL) and its affiliated companies do not 06:21 08:55 SMTP-(000005BC) 220-     authorize the use of its proprietary computers and computer 06:21 08:55 SMTP-(000005BC) 220-     networks to accept, transmit, or distribute unsolicited bulk 06:21 08:55 SMTP-(000005BC) 220      e-mail sent from the internet. 06:21 08:55 SMTP-(000005BC) >EHLO potlatch.esd112.wednet.edu 06:21 08:55 SMTP-(000005BC) 250-rly-xi01.mx.aol.com potlatch.esd112.wednet.edu 06:21 08:55 SMTP-(000005BC) 250 HELP 06:21 08:55 SMTP-(000005BC) >MAIL FROM:<[EMAIL PROTECTED]> 06:21 08:55 SMTP-(000005BC) 250 OK 06:21 08:55 SMTP-(000005BC) >RCPT To:<[EMAIL PROTECTED]> 06:21 08:55 SMTP-(000005BC) 250 OK 06:21 08:55 SMTP-(000005BC) >DATA 06:21 08:55 SMTP-(000005BC) 354 START MAIL INPUT, END WITH "." ON A LINE BY ITSELF 06:21 08:55 SMTP-(000005BC) >. 06:21 08:55 SMTP-(000005BC) 250 OK 06:21 08:55 SMTP-(000005BC) rdeliver aol.com [EMAIL PROTECTED] (1) <[EMAIL PROTECTED]> 2780 06:21 08:55 SMTP-(000005BC) >QUIT 06:21 08:55 SMTP-(000005BC) 221 SERVICE CLOSING CHANNEL 06:21 08:55 SMTP-(000005BC) finished c:\IMAIL\spool\Q4c7204e.SMD status=1 06:21 08:55 SMTPD(0729004E) [164.116.2.13] connect 206.160.1.66 port 1084 06:21 08:55 SMTPD(0729004E) [206.160.1.66] HELO email.msn.com 06:21 08:55 SMTPD(0729004E) [206.160.1.66] MAIL FROM: <[EMAIL PROTECTED]> 06:21 08:55 SMTPD(0729004E) [206.160.1.66] RCPT TO: <[EMAIL PROTECTED]>