Mike,
Thanks for the help...I will try searching the logs since that probably
seems like the most economical way of tracking this down.
Kevin
At 09:45 AM 08/21/2001, you wrote:
> > Does anyone know how to send an e-mail to someone who has the above
> > referenced virus. The virus strips off the return address so I do not know
> > where it is coming from...however I can get the IP address. I am getting
> > numerous e-mails from one particular IP address and I am assuming that the
> > user does not know they have a Virus.
>
>About the only thing you can do is scan through your logs looking for
>connects from the same user when they were deliberately sending an e-mail
>with their real address.
>
>You might also try this:
>
>C:\>nbtstat -A ip_address
>
>If they're running windows, you'll probably see their machine name, current
>login name and workgroup, which might also give you a clue.
>
>But beware that if behind a firewall, the "user" might be anyone in an
>entire corporation, in which case the best thing is to notify their IT
>department. If the nbtstat works you can probably rule out the firewall
>(then again it could be a poorly configured windows box or be running
>Samba).
>
>In any event, the best course as a general matter is to report the incident
>to their ISP. If they can't/don't handle it, block the IP on your server and
>wait for a complaint.
>
>Mike
>
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
