If you shared the message headers from one of the spams and also let us know what version of IMail you are using, that would help.

FYI, the Declude log lines that you showed appear to be from system generated messages based on the size of the file name. It could be that these corespond to a different message, or it could also be that these messages are being generated by IMail1.exe as a result of being hacked in some way.

Matt



David Dodell wrote:

Saw a couple of spam messages show up in my inbox, that showed they passed
through whitelisted.

Upon examining my logs, see the following lines.

Confused, since this appears to be the same lines when I see a user
smtp authenticate.

The two "users" below exist, but they are only listed as "aliases" in
IMAIL, to point to the real email addresses of the users.  They are
not even POP3 accounts.

I don't have the accounts whitelisted anyplace ... any ideas?

David

10/23/2004 22:51:52 Q440f48c075c Skipping E-mail from authenticated user [EMAIL 
PROTECTED]; whitelisted.
10/23/2004 22:53:48 Q442b8c206cc Skipping E-mail from authenticated user [EMAIL 
PROTECTED]; whitelisted.


--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to