Well if you have '-' setup as the mailbox delimiter I can make this happen
by sending email to: [EMAIL PROTECTED], [EMAIL PROTECTED] and so on.  Not
sure if it is a sign they have been hacked - spammed, but not hacked.

Travis

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris Ulrich
Sent: Monday, November 10, 2008 6:26 AM
To: Imail_Forum@list.ipswitch.com
Subject: [IMail Forum] Possible Hack of IMail server?

We've had weird behavior the last two saturdays - around the same 
time outbound messages stopped going out & clients got a "15 tries" 
bounce back.  I looked for the logs and they ended around 3:15pm both days.

I started checking to see if a virus update or other update was 
running at that time, but have not find one yet.

One user had an issue - a box that couldn't delete messages.  I went 
into x:\imail\domain\Users to look at the list of folders.  I'm 
seeing new folders in there, and I vaguely remember this from years 
ago.  The folders ("user accounts") are:

\p
\po
\post
\postma
\postmast
\postmaste

We've found it in virtual domains.

I'm not sure if it is related, definitely odd.  Has anyone seen 
behavior like what I"m seeing on Saturdays?

And has anyone dealt with this phenomenon:

\p
\po
\post
\postma
\postmast
\postmaste

I'm on v 8.22 if that helps.  I'm also running Declude AV & Anti-Spam

Any suggestions would be much appreciated!

----------------------------------------------------------------------------
------------------------------------------------
Chris Ulrich
Cydian Technologies


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

No virus found in this incoming message.
Checked by AVG - http://www.avg.com 
Version: 8.0.175 / Virus Database: 270.9.0/1778 - Release Date: 11/9/2008
2:14 PM


To Unsubscribe: http://imailserver.com/support/discussion_list/
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://imailserver.com/support/kb.html

Reply via email to