I'm afraid you are now a member of a not very exclusive club. We started
having these kinds of things about 10 months ago. In September we
installed Len's IMGATE system and now our Imail server at least gets a rest
from time to time. You are are someone's list to send mail to, they will
try every address they can come up with and each time they find a good
address that person will get whatever crap they are sending that day.
The only way you can limit this crap is to have some kind of anti spam
relay in front of Imail to do the dirty work. We got IMGATE cause the
price is right, but you can also check out declude anti spam system also.
Gerry
At 12:26 AM 12/31/2000 -0500, [EMAIL PROTECTED] wrote:
>OK, I tried limiting the number of recipients, No luck. Take a close look
>at the log below. I seperating it into three parts!
>
>In this first part you can see that the message limit works.
>
>20001231 000419 127.0.0.1 SMTPD (07C00068) [209.101.87.2] connect
>202.185.129.3 port 62732
>20001231 000419 127.0.0.1 SMTPD (07C00068) [202.185.129.3] EHLO
>ltn.gov.my
>20001231 000420 127.0.0.1 SMTPD (07C00068) [202.185.129.3] MAIL
>FROM:<[EMAIL PROTECTED]>
>20001231 000420 127.0.0.1 SMTPD (07C00068) [202.185.129.3] RCPT
>TO:<[EMAIL PROTECTED]>
>20001231 000420 127.0.0.1 SMTPD (07C00068) [202.185.129.3] RCPT
>TO:<[EMAIL PROTECTED]>
>20001231 000421 127.0.0.1 SMTPD (07C00068) [202.185.129.3] RCPT
>TO:<[EMAIL PROTECTED]>
>20001231 000421 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000421 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000422 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000422 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000423 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000423 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000424 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000424 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000425 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000425 127.0.0.1 SMTPD (26E0013E) [209.101.87.2] connect
>209.101.87.10 port 2943
>20001231 000425 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000426 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000426 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000427 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000427 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000427 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000428 127.0.0.1 SMTPD (07C00068) [202.185.129.3] max RCPT
>exceeded RCPT TO:<[EMAIL PROTECTED]>
>20001231 000428 127.0.0.1 SMTPD (09410136) [209.101.87.2] connect
>209.101.87.2 port 2289
>20001231 000429 127.0.0.1 SMTPD (07C00068) [202.185.129.3]
>D:\IMAIL\spool\Dbe54068.SMD 2831
>20001231 000429 127.0.0.1 SMTP (263) processing
>D:\IMAIL\spool\Qbe54068.SMD
>20001231 000429 127.0.0.1 SMTP (263) ldeliver castlegate.net
>daisy-main (1) <[EMAIL PROTECTED]> 2831
>20001231 000429 127.0.0.1 SMTP (263) ldeliver castlegate.net
>mcm-main (1) <[EMAIL PROTECTED]> 2831
>20001231 000429 127.0.0.1 SMTP (263) ldeliver castlegate.net
>sarah-main (1) <[EMAIL PROTECTED]> 2831
>20001231 000429 127.0.0.1 SMTP (263) ldeliver spacey.net
>mailcopy-main (1) <[EMAIL PROTECTED]> 2831
>20001231 000429 127.0.0.1 SMTP (263) finished
>D:\IMAIL\spool\Qbe54068.SMD status=1
>
>In this next part it looks like they are methodicly hitting the server
>with email address to find good ones to deliver to.
>
>
>20001231 000647 127.0.0.1 SMTPD (09DE0136) [209.101.87.2] connect
>209.101.87.2 port 2429
>20001231 000648 127.0.0.1 SMTPD (09E00136) [209.101.87.2] connect
>63.25.196.134 port 4992
>20001231 000648 127.0.0.1 SMTPD (09E00136) [63.25.196.134] HELO
>relay1.wasantara.net.id
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] MAIL
>From: <[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000649 127.0.0.1 SMTPD (09E00136) [63.25.196.134] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>
>
>In this last part it is annother of the email address finders. Look
>closely and you can see that they found a few good address to send to. I
>checked the emails that it dose not get rejecked on and there was no new
>messages in their boxes.
>
>
>20001231 000652 127.0.0.1 SMTPD (09E70136) [209.101.87.2] connect
>208.49.186.156 port 3594
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] HELO
>mail.nowhere.com
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] MAIL
>From: <[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] RCPT
>To:<[EMAIL PROTECTED]>
>20001231 000653 127.0.0.1 SMTPD (09E70136) [208.49.186.156] ERR
>spacey.net invalid user <[EMAIL PROTECTED]
>
>
>Our LOG file looks like this all the time and almose each time its from a
>differant address.
>
>Any clues?
>
>Keith
>
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
