Please help me understand how all of these spammers (just a small
sampling of about 3000/day) can connect as 127.0.0.1.

12:08 00:24 SMTP-(0484545A) Connect gdya.com [127.0.0.1:25] (1)
12:08 00:25 SMTP-(0484545C) Connect inspirationfx.net [127.0.0.1:25] (1)
12:08 00:25 SMTP-(0484545E) Connect jedonline.com [127.0.0.1:25] (1)
12:08 00:26 SMTP-(0484545F) Connect rnabc.bc.ca [127.0.0.1:25] (1)
12:08 00:26 SMTP-(04845461) Connect free-post.com [127.0.0.1:25] (1)
12:08 00:29 SMTP-(04A00634) Connect k-image.com [127.0.0.1:25] (1)
12:08 00:32 SMTP-(04805700) Connect fujissly.com [127.0.0.1:25] (1)
12:08 00:32 SMTP-(04845466) Connect gdya.com [127.0.0.1:25] (1)
12:08 00:34 SMTP-(04845468) Connect hol.com [127.0.0.1:25] (1)
12:08 00:39 SMTP-(0480570B) Connect fujissly.com [127.0.0.1:25] (1)

Each of them then proceeds to send messages with From and Rcpt addresses
I have never heard of.

12:07 15:05 SMTPD(0F78007E) [127.0.0.1] connect 127.0.0.1 port 3195
12:07 15:05 SMTPD(0F78007E) [127.0.0.1] EHLO mail.digiconasp.com
12:07 15:05 SMTPD(0F78007E) [127.0.0.1] MAIL
FROM:<[EMAIL PROTECTED]>
12:07 15:05 SMTPD(0F78007E) [127.0.0.1] RCPT To:<[EMAIL PROTECTED]>
12:07 15:05 SMTPD(0F78007E) [127.0.0.1]
f:\imail\spool\D74030f78007e7fe0.SMD 2324

I have my SMTP security settings to relay for addresses only, with my
inside LAN subnet listed.

Naturally, this is causing blacklist issues.

Where should I look for additional information?

-DaveStrz



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to