>I have over 2000 dial up customers who need access to mail services and
>are dynamically assigned an Ip address. The only other way I can see
>around it is to use the SMTP authentication.
Are those 2,000 dial up customers using IPs of yours, or someone
else's? It's OK to add IP addresses that you have control over. However,
if you are adding 100,000's of IP addresses (using Class A and Class B type
ranges), you're asking for trouble.
>I have received one of the emails back as a forward but the message
>header only points back to My server and there is no mention of the
>original senders email address just their bogus user Name.
The mail you sent to this list contained a header:
Received: from Aeolus [63.174.244.2] by Icarus.chilitech.net with
ESMTP
(SMTPD32-6.04) id A7C76810108; Fri, 16 Nov 2001 15:32:07 -0500
This header shows that you were coming from the IP address
63.174.244.2. Just look for the same header in the E-mail that was sent to
you, and you'll see the spammer's IP address.
With 2,000 customers, it's also very likely that the spammer is one of your
customers.
> I can look in the mail log and find when the message was sent but
>since the user used a bogus
>Username I can't trace it back through my Radius logs or figure out its
>IP address.
How can you not figure out the IP address? The IP address should be right
in the logs. For example, if there is a line "11:16 10:03 SMTPD(46025103)
[192.168.100.12] MAIL FROM: <ima_spammer>", guess what the IP address
is? 192.168.100.12.
>I can find the mail message
>Qnumber but since the mail has been sent there is no corresponding
>message in the spool directory.
That's right, once an E-mail is sent, there won't normally be a copy of it
locally.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
