Most MTA's will do a lookup on the connecting IP.  Since
208.145.136.150 has a forward and reverse of www.bestintown.com
then they identify it as such.
 
This is sort of a nice feature that I would like to see in Imail to
help track down un-authorized connections from dialups.  Imail
appears to only identify the connection as whatever the caller claims
to be.
 
Dusty
----- Original Message -----
From: Gary
Sent: Wednesday, July 28, 1999 5:05 PM
Subject: [IMail Forum] Imail Log File Question

Hi,
    Please help,
        The following information is from part of 7/27/99's log file.
 
**********************************************
1    07:27 20:16 0     S32-1 processing D:\IMAIL\spool\Q75f80da.SMD
2    07:27 20:16 0     S32-1 Trying earthlink.net (0)
3    07:27 20:16 0     S32-1 Connect earthlink.net [207.217.120.130:25] (1)
4    07:27 20:16 0     S32-1 220-grebe.prod.itd.earthlink.net ESMTP Sendmail 8.9.3/8.9.3; Tue, 27 Jul 1999 20:19:00 -0700 (PDT)
5    07:27 20:16 0     S32-1 220-NO UCE.  Earthlink Network does not authorize the use of its computers
6    07:27 20:16 0     S32-1 220 or network equipment to deliver unsolicited electronic mail.
7    07:27 20:16 0     S32-1 >HELO mail.io-consulting.com
8    07:27 20:16 0     S32-1 250 grebe.prod.itd.earthlink.net Hello www.bestintown.com [208.145.136.150], pleased to meet you
9    07:27 20:16 0     S32-1 >MAIL From:<[EMAIL PROTECTED]>
10  07:27 20:16 0     S32-1 250 <[EMAIL PROTECTED]>... Sender ok
11  07:27 20:16 0     S32-1 >RCPT To:<[EMAIL PROTECTED]>
12  07:27 20:16 0     S32-1 250 <[EMAIL PROTECTED]>... Recipient ok
13  07:27 20:16 0     S32-1 >DATA
14  07:27 20:16 0     S32-1 354 Enter mail, end with "." on a line by itself
15  07:27 20:16 0     S32-1 >EOM
16  07:27 20:16 0     S32-1 250 UAA12345 Message accepted for delivery
17  07:27 20:16 0     S32-1 >QUIT
18  07:27 20:16 0     S32-1 221 grebe.prod.itd.earthlink.net closing connection
19  07:27 20:16 0     S32-1 finished D:\IMAIL\spool\Q75f80da.SMD A0
20  07:27 20:16 SMTPD(03E700DA) [127.0.0.1] connect 127.0.0.1 port 4110
**********************************************
    look at line #8 earthlink recognized the mail server as www.bestintown.com instead of www.virtec.com    
 
    This is what happened, the mail was send by OE 4.7 which is configured to user mail.virtec.com as the mail server.(I also try to send the same message through the Web Interface, same result). Basically when I check the log file and for those ISP such as earthlink and yahoo, I will get the same result with their mail server recognized us as the wrong mail server. (Oh www.bestintown.com is one of our web and mail server too.)
 
    Can someone kindly tell me what did I do wrong.

Reply via email to