>What the best way to discover if anyone has ever used my server to relay spam?

The Imail log files

If it was a "large" amount of spam, you will see that the Imail log 
file for that day or two (if the spamming spanned 24:00 oclock) will 
have been noticeably bigger than you avg log file size.

Then go look in one of these candidate/suspect log files, and just 
read through looking for MAIL FROM: sender@senderdomain that appears 
repeatedly and in great numbers.

You may also see sequences of 10's or 100's or 1000's of RCPT TO: 
recipient@recipientdomain in one SMTP session, which is a fast way of 
sending lots of spam vs one msg per SMTP connection session.

Len


http://MenAndMice.com/DNS-training : In Austin, TX; SFO, CA; Paris, 
FR
http://BIND8NT.MEIway.com : ISC BIND 8.2.3 "NT3" for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to