>Today I've find my logs file very large (12/15Mb instead the normal 4/6 Mb)
>Searching for the problema I've find out the follow lines which repeat a lot
>of times...
>=====
>SMTP (192) Connect FAKEDOMAIN.it [212.131.XXX.XXX:25] (1)
>SMTP (192) 220 inside Microsoft ESMTP MAIL Service, Version: 5.0.2195.1600
>ready at Mon, 5 Feb 2001 11:09:09 +0100
>SMTP (192) >EHLO ps5.pesaroservice.com
>SMTP (192) 250-inside Hello [193.70.108.147]
>SMTP (192) 250-TURN
>SMTP (192) 250-ATRN
>SMTP (192) 250-SIZE
>SMTP (192) 250-ETRN
>SMTP (192) 250-PIPELINING
>SMTP (192) 250-DSN
>SMTP (192) 250-ENHANCEDSTATUSCODES
>SMTP (192) 250-8bitmime
>SMTP (192) 250-BINARYMIME
>SMTP (192) 250-CHUNKING
>SMTP (192) 250-VRFY
>SMTP (192) 250-X-EXPS LOGIN
>SMTP (192) 250-X-EXPS=LOGIN
>SMTP (192) 250-AUTH LOGIN
>SMTP (192) 250-AUTH=LOGIN
>SMTP (192) 250-XEXCH50
>SMTP (192) 250-X-LINK2STATE
>SMTP (192) 250 OK
>SMTP (192) >MAIL FROM:<>
>SMTP (192) 454 5.7.3 Client was not authenticated.
>SMTP (192) SMTP_DELIV_FAILED
>SMTP (192) >QUIT
>=====
>Please correct me:
ok
>Is this a client machine called "inside" which try to send mail
correction: Imail smtp client is just echoing the banner from the remote server when
Imail connects to it.
] with my mail
>server using a null mailfrom ?
correction: 'SMTP-' in the Imail log lines is the Imail client sending to anywhere.
>If not, can you help to read this log event ?
a nul sender is trying to send, is all. The pb is the qty of attempts.
I bet you've been hijacked by a spammer. do you see a very large outgoing queue in
Imail?
Can you trace the "SMTPD" sessions where these msgs were received by your Imail?
Len
>Thanks for help.
>
>Any links to some web site to learn are welcome !
>
>Thanks to the list. It's a great school !
>
>Piero
>Italy
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
