it means, "i think", that your server is being used as an awsome spam machien.... block 64.9.9.4 within your access control list and lock every thing up.. relay.. etc..
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Gary Rafanan (GAHI) Sent: Wednesday, September 04, 2002 2:46 PM - MGMT To: [EMAIL PROTECTED] Subject: [IMail Forum] SMTP Log entry (multiple bogus address) I was examining the Imail log and found multiple entries like the ones below. Given that my mail server is 198.0.0.1 and 64.9.9.4 is not one of our IP's what does these log entries mean? It's bothering because Imail Log Analyzer shows 64.9.9.4 is doing over 3,000 SMTPD Connections on one day. -- 09:02 11:29 SMTPD(059700A2) [198.0.0.1] connect 64.9.9.4 port 1576 09:02 11:29 SMTPD(059700A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059700A2) [64.9.9.4] bogus address in MAIL FROM:<> 09:02 11:29 SMTPD(059800A2) [198.0.0.1] connect 64.9.9.4 port 1577 09:02 11:29 SMTPD(059800A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059800A2) [64.9.9.4] bogus address in MAIL FROM:<> 09:02 11:29 SMTPD(059900A2) [198.0.0.1] connect 64.9.9.4 port 1578 09:02 11:29 SMTPD(059900A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059900A2) [64.9.9.4] bogus address in MAIL FROM:<> 09:02 11:29 SMTPD(059A00A2) [198.0.0.1] connect 64.9.9.4 port 1579 09:02 11:29 SMTPD(059A00A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059A00A2) [64.9.9.4] bogus address in MAIL FROM:<> 09:02 11:29 SMTPD(059B00A2) [198.0.0.1] connect 64.9.9.4 port 1580 09:02 11:29 SMTPD(059B00A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059B00A2) [64.9.9.4] bogus address in MAIL FROM:<> 09:02 11:29 SMTPD(059C00A2) [198.0.0.1] connect 64.9.9.4 port 1581 09:02 11:29 SMTPD(059C00A2) [64.9.9.4] HELO computername 09:02 11:29 SMTPD(059C00A2) [64.9.9.4] bogus address in MAIL FROM:<> -- Gary To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. ___________________________________________________________________ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
