Sunday, October 24, 2004, 8:29:35 AM, Matt wrote:

> If you shared the message headers from one of the spams and also let us 
> know what version of IMail you are using, that would help.

I'm running 8.05, with the latest of Declude ... and actually I was
wrong, the whitelisted message I found was due to another problem I
just fixed ... I just happen to see multiple of these authenticated
user entries in the declude log at the same time.

> FYI, the Declude log lines that you showed appear to be from system
> generated messages based on the size of the file name.  It could be that 
> these corespond to a different message, or it could also be that these 
> messages are being generated by IMail1.exe as a result of being hacked 
> in some way.

Even if they were hacked, there is no way SMTP Authentification could
happen for those addresses because they are alias addresses, and not
POP3 account.

Something doesn't make sense.

>>10/23/2004 22:51:52 Q440f48c075c Skipping E-mail from authenticated user [EMAIL 
>>PROTECTED]; whitelisted.
>>10/23/2004 22:53:48 Q442b8c206cc Skipping E-mail from authenticated user [EMAIL 
>>PROTECTED]; whitelisted.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to