> >What do the "D" files look like?
>
>Here's a piece from one of the D files:
>
> Original message follows.
>
> Received: from html [172.20.207.185] by mailtest.enelpunto.net
> (SMTPD32-7.12) id A69D6CF0022; Thu, 29 Aug 2002 10:58:37 -0400
Bam. There's your answer. 172.20.207.185 is a local IP. The spammer is
sending mail through that server. It's not an IMail issue; your other
server was compromised.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
