>Here is the missing part. But why,how,???? would smtp02.wxs.nl resend this
>email with sender [EMAIL PROTECTED] ?
>I understand now that the re-sending is the reason, any suggestions how to
>stop this?
> 07:04 14:30 SMTPD(091100BA) [213.206.84.183] connect 195.64.88.69 port 1712
> 07:04 14:30 SMTPD(091100BA) [195.64.88.69] EHLO PAUL
> 07:04 14:30 SMTPD(000004C4) Authenticated [EMAIL PROTECTED], session
treated as local.
> 07:04 14:30 SMTPD(091100BA) [195.64.88.69] MAIL FROM: <[EMAIL PROTECTED]>
> 07:04 14:30 SMTPD(091100BA) [195.64.88.69] RCPT TO: <[EMAIL PROTECTED]>
> 07:04 14:30 SMTPD(091100BA)
[195.64.88.69] d:\IMail\spool\D3ff1091100bae940.SMD 2890
Here, your user connected to your IMail server, and sent the E-mail
normally. But:
>07:04 14:36 SMTPD(00D300B6) [213.206.84.183] connect 195.121.6.54 port 42877
>07:04 14:36 SMTPD(00D300B6) [195.121.6.54] EHLO smtp02.wxs.nl
>07:04 14:36 SMTPD(00D300B6) [195.121.6.54] MAIL FROM:<[EMAIL PROTECTED]>
>07:04 14:36 SMTPD(00D300B6) [195.121.6.54] RCPT TO:<[EMAIL PROTECTED]>
>07:04 14:36 SMTPD(00D300B6) [195.121.6.54]
>d:\IMail\spool\D415000d300b641c8.SMD 4120
Here, smtp02.wxs.nl is sending a similar E-mail. It is using the same
[EMAIL PROTECTED] return address, and sending it to the same [EMAIL PROTECTED]
address.
My guess is that Paul has his mail client set up to send E-mail through
both your mailserver, and smtp02.wxs.nl.
If Paul doesn't use smtp02.wxs.nl, then they are abusing your server by
sending those E-mails (they should only be sending mail from [EMAIL PROTECTED]
if they have permission to).
Note, however, the size difference: The first E-mail is 2,890 bytes,
whereas the second one is 4,120 bytes. It's possible one is text, the
other is HTML. Or maybe the large one is a bounce message or automated
message of some sort, that includes the original E-mail and comments.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
