Hello, I'm trying to see if i understand the following type of entry in my log that I see a lot:
08:01 04:16 SMTPD(02B60176) [211.196.204.79] HELO localhost 08:01 04:16 SMTPD(02B60176) [211.196.204.79] MAIL FROM:<[EMAIL PROTECTED]> 08:01 04:16 SMTPD(02B60176) [211.196.204.79] RCPT TO:<[EMAIL PROTECTED]> 08:01 04:16 SMTPD(02B60176) [211.196.204.79] ERR mail.mydomain.com invalid user <[EMAIL PROTECTED] 08:01 04:16 SMTPD(02B70176) [10.10.10.5] connect 211.196.204.79 port 42846 08:01 04:16 SMTPD(queue run) 4428 1 102 08:01 04:16 SMTPD(02B70176) [211.196.204.79] HELO localhost 08:01 04:17 SMTPD(02B70176) [211.196.204.79] MAIL FROM:<[EMAIL PROTECTED]> 08:01 04:17 SMTPD(02B70176) [211.196.204.79] RCPT TO:<[EMAIL PROTECTED]> 08:01 04:17 SMTPD(02B70176) [211.196.204.79] ERR mail.mydomain.com invalid user <[EMAIL PROTECTED] Basically none of the receipient or sender domains belong to me (luckiz.com or sdddddsa.co.kr). Does this mean someone is trying to relay messages trying to authenticate with <[EMAIL PROTECTED]> even though it says MAIL FROM:<[EMAIL PROTECTED]>? I have relay for addresses set. Or is the sender actually sending mail to my server? (somehow getting routed to me even though sddddsa.co.kr is not my domain) thanks, rob _________________________________________________________________ Join the world�s largest e-mail service with MSN Hotmail. http://www.hotmail.com Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
