Hi guys, just wanted an answer to a quick question: between 7:46AM and 8:26AM my smptp logs are FULL of the following, same address, IP, etc. Is this a a-hole trying to relay through us? That's what I'm assuming, but we have the no relay set so it seems nothing went through, which is nice, my other question, what's the best option to block a later possible attempt? use the IP? the username? This jerk tied up almost an hour's worth of resources and it ticks me off BIG time. This is the first time browsing through logs that I've seen this. I'm sure it's common internet wise, but to me it's new.
I'm new at this, so what do you imail veterans have to add? Paul 11:07 08:25 SMTPD(068F014E) [162.40.200.148] HELO NicOffice 11:07 08:25 SMTPD(068F014E) [162.40.200.148] MAIL FROM:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(068F014E) [162.40.200.148] RCPT TO:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(068F014E) [162.40.200.148] ERR mail.2khiway.net invalid user <[EMAIL PROTECTED] 11:07 08:25 SMTPD(0690014E) [63.160.179.20] connect 162.40.200.148 port 61647 11:07 08:25 SMTPD(0690014E) [162.40.200.148] HELO NicOffice 11:07 08:25 SMTPD(0690014E) [162.40.200.148] MAIL FROM:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0690014E) [162.40.200.148] RCPT TO:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0690014E) [162.40.200.148] ERR mail.2khiway.net invalid user <[EMAIL PROTECTED] 11:07 08:25 SMTPD(0691014E) [63.160.179.20] connect 199.106.238.107 port 20795 11:07 08:25 SMTPD(0691014E) [199.106.238.107] EHLO smtp26.sendafriend.com 11:07 08:25 SMTPD(0616012A) [63.160.179.20] connect 162.40.200.148 port 61648 11:07 08:25 SMTPD(0691014E) [199.106.238.107] MAIL FROM:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0616012A) [162.40.200.148] HELO NicOffice 11:07 08:25 SMTPD(0691014E) [199.106.238.107] RCPT TO:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0616012A) [162.40.200.148] MAIL FROM:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0616012A) [162.40.200.148] RCPT TO:<[EMAIL PROTECTED]> 11:07 08:25 SMTPD(0616012A) [162.40.200.148] ERR mail.2khiway.net invalid user <[EMAIL PROTECTED] 11:07 08:25 SMTPD(0691014E) [199.106.238.107] D:\IMail\spool\D69da0691014ee865.SMD 15929 11:07 08:25 SMTPD(0618012A) [63.160.179.20] connect 162.40.200.148 port 61649 11:07 08:25 SMTPD(0618012A) [162.40.200.148] HELO NicOffice --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
