> mx is seven-of-nine.upnaway.com IP address 202.71.165.11

True, good call there. That's not the compromised machine, though.

202.71.162.125  is  the  IMail  server (hirogen.upnaway.com). It's not
currently an open relay. Could be a multistage situation of some sort.
Still  haven't heard back from Bo on whether relaying is possible from
other IPs.

-Sandy


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to