> I found this in my log file today, I was wandering if someone
> could help me out (are we getting spammed? if so why did it
> not send to every user on this host?)
Is someone relaying through you? No, since the addresses are on your server.
Is it incoming spam? Quite possible. Do all/most of those users exist? If so, then
it is likely just incoming spam.
The other likely option is a "dictionary attack", where they aren't really sending any
E-mail, they are just gathering a list of acceptable E-mail addresses on your server
by making educated guesses.
>01:04 14:49 SMTPD(018100A8) [63.27.1.243] HELO mail.digisys.net
FYI, that IP address (63.27.1.243) is listed in DUL, so if you were using our Declude
software or Len's IMGate, you could have prevented it from being delivered.
--
-Scott
Declude: Anti-virus and Anti-spam solutions for IMail. http://www.declude.com
--
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
