Thanks Davide that helped. I had 2 accounts that were apparently compromised. I changed the PWs and the illicit activity died from them.
I take it the entries I see in the log file with a status of ERELAY & ESPAM don't actually send email anywhere. The only activity (illicit) I see in the log file are now associated with those status'. Thanks again, Jim Davide Libenzi <[EMAIL PROTECTED]> wrote: On Fri, 21 Nov 2003, Jim wrote: > Hey all, > > I "think" I have a secure xmail server. I've tested it via some of the open relay > sites, and nothing has come back indicating it is open. > > However, I can sit and watch the message.id index slowly grow (about 1 every 15 or > so secs). This server handles mail for several (11 domains),, but my personal domain > is really the only one that gets any activity. > > The spam rate was much higher, but I went through the spool folder and found some > addresses to block, so I've made entries into the spam-address & spammers.tab. > > I've followed all the guidance for locking down the server, and my TAB files are as > follows: Take a look at the smtp and smail log ... always helps. - Davide - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] --------------------------------- Do you Yahoo!? Free Pop-Up Blocker - Get it now - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
