Scott, I think your right. I think it is a bounce/automated message. Is there a way to stop this? Paul is not connected in anyway to wxs.nl; I checked his outlook-exp. settings and there is only one account.
Rob Weij QPlus Business Internet ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 04, 2002 7:50 PM Subject: Re: [IMail Forum] List sends multiple email > > >Here is the missing part. But why,how,???? would smtp02.wxs.nl resend this > >email with sender [EMAIL PROTECTED] ? > >I understand now that the re-sending is the reason, any suggestions how to > >stop this? > > > 07:04 14:30 SMTPD(091100BA) [213.206.84.183] connect 195.64.88.69 port 1712 > > 07:04 14:30 SMTPD(091100BA) [195.64.88.69] EHLO PAUL > > 07:04 14:30 SMTPD(000004C4) Authenticated [EMAIL PROTECTED], session > treated as local. > > 07:04 14:30 SMTPD(091100BA) [195.64.88.69] MAIL FROM: <[EMAIL PROTECTED]> > > 07:04 14:30 SMTPD(091100BA) [195.64.88.69] RCPT TO: <[EMAIL PROTECTED]> > > 07:04 14:30 SMTPD(091100BA) > [195.64.88.69] d:\IMail\spool\D3ff1091100bae940.SMD 2890 > > Here, your user connected to your IMail server, and sent the E-mail > normally. But: > > >07:04 14:36 SMTPD(00D300B6) [213.206.84.183] connect 195.121.6.54 port 42877 > >07:04 14:36 SMTPD(00D300B6) [195.121.6.54] EHLO smtp02.wxs.nl > >07:04 14:36 SMTPD(00D300B6) [195.121.6.54] MAIL FROM:<[EMAIL PROTECTED]> > >07:04 14:36 SMTPD(00D300B6) [195.121.6.54] RCPT TO:<[EMAIL PROTECTED]> > >07:04 14:36 SMTPD(00D300B6) [195.121.6.54] > >d:\IMail\spool\D415000d300b641c8.SMD 4120 > > Here, smtp02.wxs.nl is sending a similar E-mail. It is using the same > [EMAIL PROTECTED] return address, and sending it to the same [EMAIL PROTECTED] > address. > > My guess is that Paul has his mail client set up to send E-mail through > both your mailserver, and smtp02.wxs.nl. > > If Paul doesn't use smtp02.wxs.nl, then they are abusing your server by > sending those E-mails (they should only be sending mail from [EMAIL PROTECTED] > if they have permission to). > > Note, however, the size difference: The first E-mail is 2,890 bytes, > whereas the second one is 4,120 bytes. It's possible one is text, the > other is HTML. Or maybe the large one is a bounce message or automated > message of some sort, that includes the original E-mail and comments. > > -Scott > --- > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > IMail. http://www.declude.com > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Please visit the Knowledge Base for answers to frequently asked > questions: http://www.ipswitch.com/support/IMail/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
