|
Most MTA's will do a lookup on the connecting
IP. Since
then they identify it as such.
This is sort of a nice feature that I would like to
see in Imail to
help track down un-authorized connections from
dialups. Imail
appears to only identify the connection as whatever
the caller claims
to be.
Dusty
----- Original Message -----
Sent: Wednesday, July 28, 1999 5:05
PM
Subject: [IMail Forum] Imail Log File
Question
Hi,
Please help,
The
following information is from part of 7/27/99's log file.
**********************************************
1 07:27 20:16 0
S32-1 processing D:\IMAIL\spool\Q75f80da.SMD 2 07:27
20:16 0 S32-1 Trying earthlink.net
(0) 3 07:27 20:16 0 S32-1 Connect
earthlink.net [207.217.120.130:25] (1) 4 07:27 20:16
0 S32-1 220-grebe.prod.itd.earthlink.net ESMTP
Sendmail 8.9.3/8.9.3; Tue, 27 Jul 1999 20:19:00 -0700
(PDT) 5 07:27 20:16 0 S32-1
220-NO UCE. Earthlink Network does not authorize the use of its
computers 6 07:27 20:16 0 S32-1
220 or network equipment to deliver unsolicited electronic
mail. 7 07:27 20:16 0 S32-1
>HELO mail.io-consulting.com 8 07:27 20:16
0 S32-1 250 grebe.prod.itd.earthlink.net Hello www.bestintown.com [208.145.136.150],
pleased to meet you 9 07:27 20:16
0 S32-1 >MAIL From:<[EMAIL PROTECTED]> 10
07:27 20:16 0 S32-1 250 <[EMAIL PROTECTED]>...
Sender ok 11 07:27 20:16 0 S32-1 >RCPT
To:<[EMAIL PROTECTED]> 12
07:27 20:16 0 S32-1 250 <[EMAIL PROTECTED]>...
Recipient ok 13 07:27 20:16 0 S32-1
>DATA 14 07:27 20:16 0 S32-1 354 Enter
mail, end with "." on a line by itself 15 07:27 20:16
0 S32-1 >EOM 16 07:27 20:16
0 S32-1 250 UAA12345 Message accepted for
delivery 17 07:27 20:16 0 S32-1
>QUIT 18 07:27 20:16 0 S32-1 221
grebe.prod.itd.earthlink.net closing connection 19 07:27 20:16
0 S32-1 finished D:\IMAIL\spool\Q75f80da.SMD
A0 20 07:27 20:16 SMTPD(03E700DA) [127.0.0.1] connect 127.0.0.1 port
4110
**********************************************
This is what happened, the
mail was send by OE 4.7 which is configured to user mail.virtec.com as the
mail server.(I also try to send the same message through the Web Interface,
same result). Basically when I check the log file and for those ISP such as
earthlink and yahoo, I will get the same result with their mail server
recognized us as the wrong mail server. (Oh www.bestintown.com is one of our web and
mail server too.)
Can someone kindly tell me
what did I do wrong.
|