>>I open up the log file and I notice an IP address always appear in the log
and it is not in my relay list so I don't know how come all these mail ended
up in my spool. >>
I meant to post this yesterday....
In the logs PRIOR to what you posted, where the server HELOs the user,
do you see a line that says "treated as local"? Because if you do, then this
user probably got a password for an account on your system, and was thus
able to send mail through you by AUTH for that account.
I could be wrong here, but that's what I experienced yesterday, and
caught it right away, before it got out of hand.
Paul
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
