>How can I tell if someone has hijacked our server?
You have to find evidence in the logs. If you are running our Declude
Hijack, you will see the IP address and the number of E-mails they have
sent, making it easier to notice.
If you do not have much outgoing mail volume, you can type:
FIND "rdeliver" sys0809.txt
to see all the outgoing E-mail for the day. You can add " >> output.txt"
to save it to a text file. You need to replace "rdeliver" with "gdeliver"
if you use a gateway (which I think you do from what I remember from the
logs you posted earlier).
> And what kind of mail is generated with the <> mail from?
See my previous E-mail (whenever it may arrive!). It's usually a bounce
message from postmaster.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
