Exactly.. The messages were flopping back and forth between two mailboxes that had routing rules pointing to each other. The AUTH login was the Sambar forwarding the message.
OK.. I'm embarrassed. At least now if I ever see 127.0.0.1 in the SMTP log again, I'll have a clue where to look :) Paul -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James W Sent: Monday, November 24, 2003 12:43 PM To: sambar List Member Subject: [sambar] Mail Hack? Routing loop? :-) Been there, done that. ----- Original Message ----- From: "Paul Alger (Ironclad)" <[EMAIL PROTECTED]> To: "sambar List Member" <[EMAIL PROTECTED]> Sent: Monday, November 24, 2003 1:33 PM Subject: [sambar] Mail Hack? > Thanks James. > > Found the problem. My screw up. I think I have it fixed now. I'd tell you > what the problem was but I'm too embarrassed.. > > But the router log was the key to the answer.. > > Paul Alger > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > James W > Sent: Monday, November 24, 2003 12:18 PM > To: sambar List Member > Subject: [sambar] Mail Hack? > > Looks like you should be the one to scan for virus. > > Check your router.log. I've seen strange things in smtp.log only to find > that they never left the server. > > > > ----- Original Message ----- > From: "Paul Alger (Ironclad)" <[EMAIL PROTECTED]> > To: "sambar List Member" <[EMAIL PROTECTED]> > Sent: Monday, November 24, 2003 12:50 PM > Subject: [sambar] Mail Hack? > > > > Here is the entry from the mail.ini file > > > > Restrict Relay = true > > Restrict Relay IPs = > > > > I've never been an open relay (that I know of anyway). This one is > driving > > me crazy! I'm having the user scan for viruses and I've deleted her > account > > until I can figure this out. > > > > What has me baffled is that the 127.0.0.1 entries are using AUTH lo login > > with the correct username and password! This is a little scary. > > > > Paul > > > > > > ------------------------------------------------------- > To unsubscribe please go to http://www.sambar.ch/list/ > > > > > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.542 / Virus Database: 336 - Release Date: 11/18/2003 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.542 / Virus Database: 336 - Release Date: 11/18/2003 > > > > > ------------------------------------------------------- > To unsubscribe please go to http://www.sambar.ch/list/ > > > > > ------------------------------------------------------- To unsubscribe please go to http://www.sambar.ch/list/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.542 / Virus Database: 336 - Release Date: 11/18/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.542 / Virus Database: 336 - Release Date: 11/18/2003 ------------------------------------------------------- To unsubscribe please go to http://www.sambar.ch/list/
