Below is the entire header as received by Imail from that IP address on
PacBell. The local user authenticated to Imail.
The user was then able to send over 200 messages. Declude Hijack caught
them.
It appears that PacBell is doing some kind of funny business when users send
e-mail. I am not sure, but maybe this is there Webmail?
Does any one know what this is?
BTW, other local users have also come from that IP address, but in each case
a different user, or maybe session, has a different PA number.
I figured this can not be PacBell forcing users to use their e-mail server,
as the user did authenticate to Imail in the SMTPD log.
I really do not feel like ALLOWIP in the Hijack configuration file, but I
will have to talk to this client about policy and they will have to decide.
You know realtors, all they care about is making sure the information gets
out. They do not care about the proper way to do things. (As far as their
e-mail usage goes.)
______________________________________________________
Received: from PA6846 [66.126.22.186] by mail.localdomain.local with ESMTP
(SMTPD32-8.03) id ABA36FC016E; Sat, 04 Oct 2003 13:20:51 -0700
Reply-To: <[EMAIL PROTECTED]>
From: "Localuser" <[EMAIL PROTECTED]>
To: "RemoteUser" <[EMAIL PROTECTED]>
Subject:
Date: Sat, 4 Oct 2003 13:17:12 -0700
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_02A4_01C38A79.D26D4C00"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
This is a multi-part message in MIME format.
_____________________________________________________
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
