Hi Steve,

you wrote in part:
I did a file scan looking for the "adding" phrase and it is not to be found. I am sure IMS is adding this somewhere internally.

It is. If you look in the configurator there are some switches which mind things like auto-cleanups, etc. I don't run 2.7 so I don't know what you have exactly but certainly messages like that come from iMS itself.

I separated the network from other machines and the spam kept showing up. The last thing for me to verify is to place a packet sniffer on the interface so I can make a cut plane of where this is coming from for absolute sure.

I really have no clue how this is happening right now. In the meantime I banned the server from receiving email from itself and this helped immensely. The little spammy SOB is still floating around, but not causing me major headaches at this point, so I can now concentrate on figuring out what I have.

One trick if you can afford the downtime is to turn off the SMTP and POST servers and look in what is in the POST queue. We have had similar things happen and ofter found an email in the queue that was effectively looping, ie it was sending to itself but with a CC: that went elswhere or something similar. I suggest that you do a search for the dodgy domain name and pull those items out of the queue. Then start SMTP with POST still off and see what comes in. If you still get then then it is external to iMS and you can then debug from that perspective.


--

Kym Kovan,
Technical Support,
mort bay communications

[EMAIL PROTECTED]
+61.2 9559 2629

==^=======================================================
This list server is Powered by iMS  "The Swiss Army Knife of Mail Servers"
--------------------------------------------------------------------------------------
This list is provided as a free service.  Although we will try to address issues
in a timely manner, support via this list is not guaranteed.  If you require 
expedited
support then a support contract is required.  Support may be purchased from
http://www.coolfusion.com/commerce.  Details regarding support options may be 
reviewed
at: http://www.coolfusion.com/SupportOptions.cfm
--------------------------------------------------------------------------------------
To leave this list please complete the form at 
http://www.coolfusion.com/Support/
Need an iMS Developer license?  Sign up for a free license here:
http://www.coolfusion.com/Developers/
List archives: http://www.coolfusion.com/cfbb/
Note: You are subscribed as archive_jab_org / [EMAIL PROTECTED]
==^=======================================================


Reply via email to