>02:28 09:24 SMTP-(000007F4) processing C:\IMail\spool\Q341d763.GSC
>02:28 09:24 SMTP-(000007F4) ldeliver mydomain.com yyyy-Sent (1) <[EMAIL PROTECTED]> 
>1055

This appears to be a user of yours sending an E-mail via the web.

>02:28 09:24 SMTP-(000007F4) Trying anotherdomain.com (0)
...
>02:28 09:24 SMTP-(000007F4) finished C:\IMail\spool\Q341d763.GSC status=1

... and IMail sending it.

>02:28 09:24 SMTP-(00000990) processing C:\IMail\spool\Q264c138.SMD

Then IMail processing another E-mail, this one to Yahoo.

>02:28 09:24 SMTP-(00000990) >MAIL FROM:<[EMAIL PROTECTED]>
>02:28 09:24 SMTP-(00000990) >RCPT To:<[EMAIL PROTECTED]>

This is someone claiming to be from your domain, and sending mail to Yahoo.  If the 
true value of the MAIL FROM (not the one you changed as shown above) is NOT a local 
user, then it is very likely a spammer.

Make sure that you have "locked down" your mail server so that only authorized people 
can use it.  Otherwise, you are offering a free service to spammers, and with word of 
mouth you'll get a lot more business than you can handle.  <G>


--
                      -Scott

Declude: Anti-virus and Anti-spam solutions for IMail.  http://www.declude.com
--

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to