They might have used the address [EMAIL PROTECTED] The default password
for the root account is "password", so it is easy to use SMTP AUTH to send
messages. You should update the passwords on your "root" users to something
very long and hard to break.
----- Original Message -----
From: "Paul Navarre" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, June 05, 2007 11:12 PM
Subject: Re: [IMail Forum] Authed user in 7.15?
Sanford Whiteman wrote:
No MAIL FROM: line? Then there's no message to speak of.
--Sandy
The Mail From: line shows an account not hosted on my server. Relay is set
for addresses, with only a few specific trusted IPs there. The sending IP
according to the logs is not one of the trusted IPs. My assumption is that
the person used SMTP Auth set with an account that *is* on the server to
send the message but I have no idea which one. Any ideas how to pin it
down?
Thanks,
Paul
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
