Ah ok - in that case make sure your root passwords were changed for each domain. The default is "password".
Travis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Ulrich Sent: Monday, November 10, 2008 7:15 AM To: Imail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] Possible Hack of IMail server? Its not at the "sub level" - its at the user level. So there is a users folder, and then: \users\chris \users\tom \users\p \users\po \users\post \users\postma \users\postmast I know what you are referring to, but that would cause: \users\chris \users\chris\p \users\chris\po \users\chris\post \users\chris\postma \users\chris\postmast I'm seeing it at the base level Thanks At 09:51 AM 11/10/2008, you wrote: >Well if you have '-' setup as the mailbox delimiter I can make this happen >by sending email to: [EMAIL PROTECTED], [EMAIL PROTECTED] and so on. Not >sure if it is a sign they have been hacked - spammed, but not hacked. > >Travis > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Chris Ulrich >Sent: Monday, November 10, 2008 6:26 AM >To: Imail_Forum@list.ipswitch.com >Subject: [IMail Forum] Possible Hack of IMail server? > >We've had weird behavior the last two saturdays - around the same >time outbound messages stopped going out & clients got a "15 tries" >bounce back. I looked for the logs and they ended around 3:15pm both days. > >I started checking to see if a virus update or other update was >running at that time, but have not find one yet. > >One user had an issue - a box that couldn't delete messages. I went >into x:\imail\domain\Users to look at the list of folders. I'm >seeing new folders in there, and I vaguely remember this from years >ago. The folders ("user accounts") are: > >\p >\po >\post >\postma >\postmast >\postmaste > >We've found it in virtual domains. > >I'm not sure if it is related, definitely odd. Has anyone seen >behavior like what I"m seeing on Saturdays? > >And has anyone dealt with this phenomenon: > >\p >\po >\post >\postma >\postmast >\postmaste > >I'm on v 8.22 if that helps. I'm also running Declude AV & Anti-Spam > >Any suggestions would be much appreciated! > >--------------------------------------------------------------------------- - >------------------------------------------------ >Chris Ulrich >Cydian Technologies > > >To Unsubscribe: http://imailserver.com/support/discussion_list/ >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://imailserver.com/support/kb.html > >No virus found in this incoming message. >Checked by AVG - http://www.avg.com >Version: 8.0.175 / Virus Database: 270.9.0/1778 - Release Date: 11/9/2008 >2:14 PM > > >To Unsubscribe: http://imailserver.com/support/discussion_list/ >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://imailserver.com/support/kb.html To Unsubscribe: http://imailserver.com/support/discussion_list/ List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://imailserver.com/support/kb.html To Unsubscribe: http://imailserver.com/support/discussion_list/ List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://imailserver.com/support/kb.html
