here it is...
09/20/2002 12:18:34 Q4a5a438800aa39c6 [EMAIL PROTECTED] is not local [0] 0.
09/20/2002 12:18:34 Q4a5a438800aa39c6 Outgoing from 128.242.197.219: Sent over 80
E-mails within 30 minutes; quarantining to hold2.
09/20/2002 12:18:34 Q4a5a438800aa39c6 Outgoing from 128.242.197.219: SPAM: HOLDING
-----Original Message-----
From: "R. Scott Perry"
Sent: Tue, 24 Sep 2002 11:29:32 -0400
Subject: Re: [Declude.JunkMail] hijack question
>It was originally sent to "[EMAIL PROTECTED]" which is not a domain on our
>Imail server. This domain is on a Verio server. But this guy has Mail
>Forwarded set up for this account to forward to "[EMAIL PROTECTED]", which
>is a domain on our Imail server. So it was forwarded from the Verio
>server to our server, and then that is the first time our server saw it
>and when Declude HiJack saw it as Outgoing instead of Incoming.
You should have lines in the hi####.log file that say something like
"[EMAIL PROTECTED] is not local [0] 0" -- what do those lines say?
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
