>I am getting many people from AOL complaining someone from us is
>SPAMMING
>
>However, it cant be as relay is off.

It may be that someone is using a return address on your domain (either a 
real one or a fake one).  We have a spammer that has occasionally been 
using a fake return address on one of our domains for about 6 months now.

>But I looked in my log files and see this.   Lots of it.  What is
>happening here?
>
>20010613 225038 127.0.0.1 SMTPD (0DD800E0) [205.188.159.7] EHLO
>omr-d04.mx.aol.com

An AOL mail server is connecting to your mail server.  You can verify that 
it really is AOL by doing a reverse DNS lookup (which could be fake, but 
they'd likely get into serious trouble if they did that).

>20010613 225038 127.0.0.1 SMTPD (0DD800E0) [205.188.159.7] bogus address
>in MAIL From:<>

This means that AOL's mail server is sending you an E-mail from "<>".  That 
could be a return receipt for one of your users, or it could be a bounce 
message, or something similar.  But your system is refusing it, which it 
isn't supposed to do.  You need to uncheck the "Refuse NULL <> Senders" 
option in IMail Administrator.

                                                            -Scott

Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to