> Does this look like someone is trying to use my server for
> relay? ... Plus I know this user doesn't exist on my server...
> 03:29 18:47 SMTPD(017F014A) [209.191.134.31] MAIL
> FROM:<bounce-daily-2000_03_30_02_11_49-aricci=domain.com@pbulk
> 01.thestreet.com>
> 03:29 18:47 SMTPD(017F014A) [209.191.134.31] RCPT
> TO:<[EMAIL PROTECTED]>
> 03:29 18:47 SMTPD(017F014A) [209.191.134.31] ERR domain.com
> invalid user <[EMAIL PROTECTED]
It mostly depends on whether "@domain.com" is the name of your server, or
someone else's. It's clear that the sender isn't a single user, but some
sort of bulk E-mailer. If "@domain.com" is your server (IE if there was an
[EMAIL PROTECTED], mail for him would get delivered to your server), then it
isn't spam (it should be connecting to your server). If "@domain.com" isn't
your server, then it almost certainly is a relay attempt.
Of course, if this test machine has no DNS entry (no MX record), it is
almost 100% certainly a relay attempt.
-Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
