> Thanks for that, didnt want to take any chances on them, so I have already
blocked the whole
> ip range of mpinet.
> example log file:
> 12:16 18:43 SMTPD(008900C0) [216.97.206.1] MAIL From: <[EMAIL PROTECTED]>
> 12:16 18:43 SMTPD(008900C0) [216.97.206.1] RCPT To:<[EMAIL PROTECTED]>
> 12:16 18:43 SMTPD(008900C0) [216.97.206.1] RCPT
To:<[EMAIL PROTECTED]>
That's not spam (unwanted E-mail coming into your users). That's a spammer
stealing your service ("hijacking"), also called a DOS (Denial Of Service)
attack if it used up enough CPU time or bandwidth to affect any of your
customers.
You can't do much about incoming spam, except attempt to block it, and maybe
complain about it. But, this is different. First, you need to close your
open relay -- that's the only reason this guy was able to steal your
service. Next, complain to mpinet and make sure that they get rid of this
guy's account. Then, make sure that your open relay is really closed.
-Scott
Declude: Anti-spam and Anti-virus solutions for IMail.
http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
