Ok, time to get yelled at. <hopefully not, but I'm ready.
Our server is set to RELAY FOR ADDRESSES, with our 3 class C's listed in
the ADDRESS part. Also checked are "Allow remote mail and view to local
groups, check valid sender, and auto deny possible hack attempts.
PROBLEM: While going through the logs today I see the following:
01:16 12:02 SMTPD(24850108) [210.0.137.240] EHLO Lucas
01:16 12:02 SMTPD(00000428) Authenticated [EMAIL PROTECTED], session
treated as local.
01:16 12:02 SMTPD(24850108) [210.0.137.240] MAIL FROM:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(25220116) [210.0.137.240]
D:\IMail\spool\De5a425220116eb5d.SMD 6829
01:16 12:02 SMTPD(24850108) [210.0.137.240] RCPT TO:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(24850108) [210.0.137.240]
D:\IMail\spool\De5a924850108fce1.SMD 6904
01:16 12:02 SMTPD(25220116) [210.0.137.240] MAIL FROM:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(24850108) [210.0.137.240] MAIL FROM:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(24850108) [210.0.137.240] RCPT TO:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(25220116) [210.0.137.240] RCPT TO:<[EMAIL PROTECTED]>
01:16 12:02 SMTPD(25220116) [210.0.137.240]
D:\IMail\spool\De5ac252201160936.SMD 6856
There's more than that. I've since blocked 210.0.137.240, and changed
passwords so Root <postmaster> Is there anything else to do to fix that?
Since the only addresses listed under RELAY FOR ADDRESSES are our class Cs,
HELP!
Paul
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
