>I have my IMAIL set to relay for addresses.
Good.
>The only IP i'm using is my local IP (216.139.227.215)
>because I only send mail programmatically from my ASP
>applications. I make users send mail using their local ISP
>accounts.
Good.
However, are you sure it is set up the way you think it is? Double-check
to make sure that you are set for "Relay for Addresses", then stop/restart
the IMail SMTP service.
>Here's an example:
>
>Received: from dell-wprlp767iz ([216.139.227.215])
> by www.netserverz.com (8.9.3/8.9.3) with ESMTP id HAA17747
> for <[EMAIL PROTECTED]>; Mon, 25 Mar 2002 07:57:36 +1100
This means that you (or whoever received the E-mail) got the E-mail from
www.netserverz.com (either your mailserver or that of the
recipient). Assuming that you trust that mailserver (which you should, if
it is yours), it received the E-mail from 216.139.227.215, which is your
mailserver. Combine that with the (invalid, by the way) hostname of
"dell-wprlp767iz" listed in that header, which matches the one that your
mailserver emits, it really looks like it got the E-mail from your mailserver.
>Received: from 210.0.144.254 [210.0.144.254] by dell-wprlp767iz
> (SMTPD32-7.00 EVAL) id AB3D2BD023E; Sun, 24 Mar 2002 15:03:25 -0800
And this helps confirm that it came from you. The hostname (dell-...) and
the IMail version match your IMail server. IMail is claiming that the
E-mail originated from 210.0.144.254.
I would first verify with your SMTP logs to make sure that it did send out
this E-mail (you can check the SYS0324.txt log file at about 15:03).
>From: ege** LIMITED AVAILABILTY** <[EMAIL PROTECTED]>
Since there are no other Received: headers, the E-mail came directly from
210.0.144.254. It sounds like someone hacked into the web server and is
sending mail from it.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
