Can someone help me with this:

=================================================================
06:29 11:05 SMTP-(015800D6) processing S:\\Q001f014c008640c5.SMD
06:29 11:05 SMTP-(015800D6) 554 delivery error: dd Sorry your message to <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] cannot be delivered. This account has been disabled or discontinued [#102]. - mta208.mail.scd.yahoo.com

Here, Yahoo has said that the E-mail address that your mailserver was sending to does not exist.


It seems like the address: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] is sending an email to: <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED] & somehow hour server is being used. Our server is definitely set to NO MAIL RELAY so I am wondering if this is one of those cases where a bogus return address on our server is used and now the bounces are coming here or a user account is being used to send out email. There are several log entires like this.

In order to find out what is happening here, you would need to look for the SMTPD lines (by searching the log file for "001f014c008640c5"). I don't believe that SMTP AUTH requires that the sender use the same return address that they authenticate with, so probably someone authenticated (either a legitimate user, or perhaps a spammer), and sent the E-mail.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to