As shown by the log samples below, recently there have been connections
to our server ("bobcat.jcjc.cc.ms.us", also responses to
"bobcat.jcjc.edu") from remote units that seem to claim to be
"mail.jcjc.cc.ms.us" or "mail.jcjc.edu".

We are inside a private network (hence the 172.22 address).  Our public
address is 216.79.144.2.  From the second line, these outside devices
seem to claim to be "us". 

The 131.95.162.139 belongs to USM.EDU.
The 63.160.86.83 belongs to MEGAGATE.COM
The 63.166.146.23 belongs to SPRINTLINK.NET

I guess my questions are: (1) Do I have a problem here?  (2) I am set to
relay for my internal IPs only.  Can this get around that setting and
make me a relay?  (3) Besides contacting the IP owners, what should be
done?

Thanks.
John

08:26 16:43 SMTPD(1C19025C) [172.22.18.2] connect 131.95.162.139 port
3529
08:26 16:43 SMTPD(1C19025C) [131.95.162.139] HELO mail.jcjc.cc.ms.us
08:26 16:43 SMTPD(1C19025C) [131.95.162.139] MAIL
FROM:<[EMAIL PROTECTED]>
08:26 16:43 SMTPD(1C19025C) [131.95.162.139] RCPT
TO:<[EMAIL PROTECTED]>
08:26 16:43 SMTPD(1C19025C) [131.95.162.139]
C:\IMAIL\spool\Da1181c19025ca1d8.SMD 40634

08:24 16:58 SMTPD(2A6A00AC) [172.22.18.2] connect 63.160.86.83 port 3936
08:24 16:58 SMTPD(2A6A00AC) [63.160.86.83] HELO
08:24 16:58 SMTPD(2A6A00AC) [63.160.86.83] MAIL
FROM:<[EMAIL PROTECTED]>
08:24 16:58 SMTPD(2A6A00AC) [63.160.86.83] RCPT TO:<[EMAIL PROTECTED]>
08:24 16:58 SMTPD(2A6A00AC) [63.160.86.83]
C:\IMAIL\spool\D01702a6a00acf928.SMD 43182

08:24 15:31 SMTPD(283100AC) [172.22.18.2] connect 63.166.146.23 port
2129
08:24 15:31 SMTPD(283100AC) [63.166.146.23] HELO mail.jcjc.edu
08:24 15:31 SMTPD(283100AC) [63.166.146.23] MAIL
FROM:<[EMAIL PROTECTED]>
08:24 15:31 SMTPD(283100AC) [63.166.146.23] RCPT TO:<[EMAIL PROTECTED]>
08:24 16:58 SMTPD(2A6A00AC) [63.160.86.83]
C:\IMAIL\spool\D01702a6a00acf928.SMD 43182

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to