My log file is usually 27 megs. For the past two days it's been over 200 megs. I deleted the log file to make a small for easier reading. I see a ton of these all from the same address. I have already done a dig on the IP. However this guy is trying to send mail to other invalid for other domains on the server (there over 300). I'm running 6.06 with the latest hotfixes. How did this guy get list of all my domains. I added the ip to my list of blocked IP's.
TPD (0013025A) [194.198.208.46] RCPT To:<[EMAIL PROTECTED]> 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] ERR email.cshore.com invalid user <[EMAIL PROTECTED] 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] RCPT To:<[EMAIL PROTECTED]> 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] ERR email.cshore.com invalid user <[EMAIL PROTECTED] 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] RCPT To:<[EMAIL PROTECTED]> 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] ERR email.cshore.com invalid user <[EMAIL PROTECTED] 20020418 091532 127.0.0.1 SMTPD (0013025A) [194.198.208.46] RCPT To:<[EMAIL PROTECTED]> Andrew P. Kaplan Network Administrator CyberShore, Inc. http://www.cshore.com "Somehow I imagined this experience would be more rewarding" Calvin --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.332 / Virus Database: 186 - Release Date: 3/6/02 Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
