>We're receiving emails from: rly-ip02.mx.aol.com.
You mean you are receiving E-mails from someone CLAIMING to be rly-ip02.mx.aol.com. Only the IP address is meaningful, since a virus could easily spread itself claiming to be rly-ip02.mx.aol.com. >These emails sometimes contain viruses, or embeded scripts in the email >itself. I believe the sender is being spoofed and I'm not sure this is >really and AOL relay. Does anybody know how I can figure out who owns this >name. I've got the ip address as 152.163.225.160. http://www.dnsstuff.com/tools/whois.ch?ip=152.163.225.160 shows that it really is AOL. Unfortunately, there isn't much you can do about it, except block it (for this one issue, you could use IMail's Control Access or Kill List or filtering, or for general virus/spam protection you can use tools such as our Declude, or IMGate, or IMail AntiVirus). You can contact AOL about it, but it's unlikely that they will have the time to track down the user and notify them of the problem (assuming that the return address is not valid -- otherwise you can E-mail them and let them know). -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
