Whats even weirder is he's got his other account still forwarding to an account on our
server, but Declude HiJack is now logging these forwarded messages as Incoming...
09/24/2002 09:31:27 Q692f009d009eea55 Incoming from 128.242.197.219: OK.
...the only difference is on the 20th we were running Imail 7.10 with Declude 1.60,
and now we're running Imail 7.13 with Declude 1.61. Could it have been a problem with
the older version of either of those?
Bill
-----Original Message-----
From: Bill B .
Sent: Tue, 24 Sep 2002 12:18:04 EDT
Subject: Re: [Declude.JunkMail] hijack question
here it is...
09/20/2002 12:18:34 Q4a5a438800aa39c6 [EMAIL PROTECTED] is not local [0] 0.
09/20/2002 12:18:34 Q4a5a438800aa39c6 Outgoing from 128.242.197.219: Sent over 80
E-mails within 30 minutes; quarantining to hold2.
09/20/2002 12:18:34 Q4a5a438800aa39c6 Outgoing from 128.242.197.219: SPAM: HOLDING
-----Original Message-----
From: "R. Scott Perry"
Sent: Tue, 24 Sep 2002 11:29:32 -0400
Subject: Re: [Declude.JunkMail] hijack question
>It was originally sent to "[EMAIL PROTECTED]" which is not a domain on our
>Imail server. This domain is on a Verio server. But this guy has Mail
>Forwarded set up for this account to forward to "[EMAIL PROTECTED]", which
>is a domain on our Imail server. So it was forwarded from the Verio
>server to our server, and then that is the first time our server saw it
>and when Declude HiJack saw it as Outgoing instead of Incoming.
You should have lines in the hi####.log file that say something like
"[EMAIL PROTECTED] is not local [0] 0" -- what do those lines say?
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
