Is there a way I can tell where the emails are coming from..I guess I canThat is not the way to guess correctly. You are either an open relay, or one of your accounts was hacked, or your server was hacked. Blocking by IP would be grossly innefective and non-permanant.
keep taking out IPs until it stops?
You need to be running IMail 8.05 HF2 or later in order for LDAP to not be hackable, otherwise shut off the LDAP service or block outside traffic from hitting that port. You need to check your relay settings, and it needs to be set to "Relay mail for [Addresses]" or "No Mail Relay" and nothing else because the others are all insecure. If an account has been hacked, you can scan your IMail logs to determine what account has been hacked and then change the password.
Matt
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
