>Watching my server today in real time ... noticing getting multiple
>connects from 209.240.23.20 ( looks like a webhosting company in
>India) ... then a Send Error 10054 ... I looked at the KB and it says
>this is a winsock type error.
>
>Is this site trying to use me as a spam relay?
If it only gets that far, ie no SMTP dialog, then it's hard to conclude
anything. Let's assume an error on their end.
If 209.240.23.20 finally gets into SMTP dialog, with "mail from:" and "rcpt
to:" that have your server rejecting due "unknown user" or "not local host,
relay denied" type of msgs, then the spammer label could stick.
Len
Len
http://BIND8NT.MEIway.com: ISC BIND 8 installable binary for NT4
http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
