>I m trying to troubleshoot an odd situation: somebody is appearing to use >a user ID on our I-Mail server to send mail.
There are two possibilities here: [1] You are allowing the person to send mail through your mailserver. This would happen if either they are an authorized user, or you are an open relay (only "Relay for Addresses" and "No Mail Relay" will prevent spammers from using your mailserver), or [2] They are using another mailserver to send mail, in which case they can use any E-mail address in the world -- even mine or yours. >The header to the e-mail is below. Unfortunately, it isn't. >We have setup Relay mail for Addresses in our SMTP Security Settings. Very good -- that means you aren't an open relay. So either the spammer is a user of yours, or #2 above applies. >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] >Sent: Tuesday, August 27, 2002 6:44 AM >To: [EMAIL PROTECTED] >Subject: Refinance and Save $$$ Unfortunately, these aren't E-mail headers. This is just a cute Microsoft Outlook synopsis of the E-mail, which includes information from the headers altered and re-formatted to what Microsoft thinks humans want to see. It does show that an E-mail address of yours is being used, but without seeing the E-mail headers (if you don't see a "Received:" header, you aren't looking at the real E-mail headers), it is not possible to say where the E-mail was sent from. Unfortunately, if they are sending the spam from another server (but with your E-mail address as the return address), there is nothing you can do except resort to non-technological means (IE legal recourse or similar means, which are extremely difficult to nearly impossible). -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
