KYM, YOU ARE THE BEST! It was a looping email! (actually two of them)
No virus whatsoever. I never thought about a looping email like this,
but this is exactly what happened. I found the two offending msgs,
deleted, restarted the servers and all has been quiet for the last hour or so.
Thanks again,
Steve
At 07:33 PM 1/23/2008, Kym Kovan wrote:
Hi Steve,
you wrote in part:
I did a file scan looking for the "adding" phrase and it is not to
be found. I am sure IMS is adding this somewhere internally.
It is. If you look in the configurator there are some switches which
mind things like auto-cleanups, etc. I don't run 2.7 so I don't know
what you have exactly but certainly messages like that come from iMS itself.
I separated the network from other machines and the spam kept
showing up. The last thing for me to verify is to place a packet
sniffer on the interface so I can make a cut plane of where this is
coming from for absolute sure.
I really have no clue how this is happening right now. In the
meantime I banned the server from receiving email from itself and
this helped immensely. The little spammy SOB is still floating
around, but not causing me major headaches at this point, so I can
now concentrate on figuring out what I have.
One trick if you can afford the downtime is to turn off the SMTP and
POST servers and look in what is in the POST queue. We have had
similar things happen and ofter found an email in the queue that was
effectively looping, ie it was sending to itself but with a CC: that
went elswhere or something similar. I suggest that you do a search
for the dodgy domain name and pull those items out of the queue.
Then start SMTP with POST still off and see what comes in. If you
still get then then it is external to iMS and you can then debug
from that perspective.
--
Kym Kovan,
Technical Support,
mort bay communications
[EMAIL PROTECTED]
+61.2 9559 2629
==^=======================================================
This list server is Powered by iMS "The Swiss Army Knife of Mail Servers"
--------------------------------------------------------------------------------------
This list is provided as a free service. Although we will try to address issues
in a timely manner, support via this list is not guaranteed. If you require
expedited
support then a support contract is required. Support may be purchased from
http://www.coolfusion.com/commerce. Details regarding support options may be
reviewed
at: http://www.coolfusion.com/SupportOptions.cfm
--------------------------------------------------------------------------------------
To leave this list please complete the form at
http://www.coolfusion.com/Support/
Need an iMS Developer license? Sign up for a free license here:
http://www.coolfusion.com/Developers/
List archives: http://www.coolfusion.com/cfbb/
Note: You are subscribed as archive_jab_org / [EMAIL PROTECTED]
==^=======================================================
