>After all that, I *do* have a question. How can I tell by looking at my >log file that my server was indeed used for relay spamming?
big picture: log file could be x times bigger that previous daily averages. close-up: In SMTPD lines, look for a "connect" from an non-trusted ip, with no SMTP AUTH, and "RCTP TO: recipient@recipientdomain" where recipientdomain is not local. Len http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
