Martin,
If the IP shown is your IMail Server (which it seems to be!), it is the
IMonitor service (in IMail), checking the SMTP (and maybe other) service.
Probably happens every minute (the default scan time).
Daniel Donnelly
________________________________________________________
----- Original Message -----
From: "Martin Bysh" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 27, 2000 4:30 PM
Subject: [IMail Forum] help reading logs
> Hi,
> I've recently suffered a spammer using my mail server as a relay and
> virtually bringing it to a hault, so I'm getting a bit paranoid about
spam.
> Running the mail server is but one of the many things I have to do in my
> small comapny so I've not had time to learn as much about it as I would
> like. I found what seems to me to be some strange entries in my syslog and
> wonder if anyone can tell me what they mean. They're probably nothing, but
> in my ignorance I'm a bit worried. The entries go on for a long time and
> look like this:
>
>
> <!--StartFragment-->11:27 00:01 IMAP4(00000768) sending "* BYE IMAP4
Server
> logging out
> "
> 11:27 00:01 IMAP4(00000768) sending "a987 OK LOGOUT completed
> "
> 11:27 00:02 SMTPD(019A00E0) [212.100.225.86] connect 212.100.225.86 port
> 2093
> QUIT
> 11:27 00:02 IMAP4(00000768) sending "* OK IMAP4 Server (IMail 6.05)
> "
> a987 LOGOUT
> 11:27 00:02 IMAP4(00000768) sending "* BYE IMAP4 Server logging out
> "
> 11:27 00:02 IMAP4(00000768) sending "a987 OK LOGOUT completed
> "
> 11:27 00:03 SMTPD(019B00E0) [212.100.225.86] connect 212.100.225.86 port
> 2097
> QUIT
> 11:27 00:03 IMAP4(00000768) sending "* OK IMAP4 Server (IMail 6.05)
> "
> a987 LOGOUT
> 11:27 00:03 IMAP4(00000768) sending "* BYE IMAP4 Server logging out
> "
> 11:27 00:03 IMAP4(00000768) sending "a987 OK LOGOUT completed
> "
> 11:27 00:04 SMTPD(019C00E0) [212.100.225.86] connect 212.100.225.86 port
> 2101
> QUIT
> 11:27 00:04 IMAP4(00000768) sending "* OK IMAP4 Server (IMail 6.05)
>
>
>
> .. with the port number constantly going up. If anyone has any ideas I'd
be
> very grateful (and I may sleep tonight).
>
> Thanks,
> Martin
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
