If my log looked like that I'd be checking to see if I was relaying. A
good place to start is http://www.abuse.net/relay.html
Peter
-----Original Message-----
From: "Jim Hall" <[EMAIL PROTECTED]>
To: "sambar List Member" <[EMAIL PROTECTED]>
Date: Sat, 1 Mar 2003 09:05:41 -0600
Subject: [sambar] Fighting Spam? {01}
> Hello All,
>
> I have been watching my SMTP.LOG for a while, and noticing a lot of
> spam
> attempts... a section of my log shows:
>
> [2003-03-01 08:47:43] OK [24.129.152.59] [HELO] hotmail.com
> [2003-03-01 08:47:45] OK [24.129.152.59] [HELO] mx2.hotmail.com
> [2003-03-01 08:47:45] OK [24.129.152.59] [MAIL] From:
> <[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:45] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [MAIL] From:
> <[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RSET]
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [QUIT]
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:46] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:47] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:47] OK [24.129.152.59] [RCPT]
> To:<[EMAIL PROTECTED]>
> [2003-03-01 08:47:47] OK [24.129.152.59] [RSET]
> [2003-03-01 08:47:47] OK [24.129.152.59] [QUIT]
>
>
> Obvisouly, none of those email addresses exist, so all the attempts
> will
> bounce.
>
> My question is - is there ANY way to stop this? Or even control it?? I
> have
> many IPs blocked in SECURITY.INI, but it doesn't seem to help much.
>
> I wanted to write the list and see what others using Sambar in a
> commercial
> environment where doing to combat this.
>
> Thanks in advance!
> -jim
> -------------------------------------------------------
> To unsubscribe please go to http://www.sambar.ch/list/
>
>
-------------------------------------------------------
To unsubscribe please go to http://www.sambar.ch/list/
