|
Can someone help me make sense of the log entry
below please. Our i-mail server is set to not relay mail for anyone - however at
first glance it appears someone is spoofing one of the hosted users ([EMAIL PROTECTED]) and using that to send out
mail.
And by the way, the user 220
mc7-f17.law1.hotmail.com shows up in our firewall log as well, as an 'smtp
probe'.
Thanks,
Tor
20021125 125637
127.0.0.1 SMTP (2336) processing
C:\IMail\spool\Q8e82000f0278744b.SMD
20021125 125637 127.0.0.1 SMTP (2336) Trying hotmail.com (0) 20021125 125637 127.0.0.1 SMTP (2336) Connect hotmail.com [65.54.253.99:25] (1) 20021125 125637 127.0.0.1 SMTP (2336) 220 mc7-f17.law1.hotmail.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.5600 ready at Mon, 25 Nov 2002 12:53:43 -0800 20021125 125637 127.0.0.1 SMTP (2336) >EHLO mail.houle.ca 20021125 125637 127.0.0.1 SMTP (2336) 250-mc7-f17.law1.hotmail.com (02.00.05.0005) Hello [207.232.106.104] 20021125 125637 127.0.0.1 SMTP (2336) 250-SIZE 3565158 20021125 125637 127.0.0.1 SMTP (2336) 250-PIPELINING 20021125 125637 127.0.0.1 SMTP (2336) 250-8bitmime 20021125 125637 127.0.0.1 SMTP (2336) 250-BINARYMIME 20021125 125637 127.0.0.1 SMTP (2336) 250-CHUNKING 20021125 125637 127.0.0.1 SMTP (2336) 250-VRFY 20021125 125637 127.0.0.1 SMTP (2336) 250-AUTH LOGIN 20021125 125637 127.0.0.1 SMTP (2336) 250-AUTH=LOGIN 20021125 125637 127.0.0.1 SMTP (2336) 250-X-HMAUTH 20021125 125637 127.0.0.1 SMTP (2336) 250 OK 20021125 125637 127.0.0.1 SMTP (2336) >MAIL FROM:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] OK 20021125 125637 127.0.0.1 SMTP (2336) >RCPT To:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] 20021125 125637 127.0.0.1 SMTP (2336) >RCPT To:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] 20021125 125637 127.0.0.1 SMTP (2336) >RCPT To:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] 20021125 125637 127.0.0.1 SMTP (2336) >RCPT To:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] 20021125 125637 127.0.0.1 SMTP (2336) >RCPT To:<[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTP (2336) 250 [EMAIL PROTECTED] 20021125 125637 127.0.0.1 SMTP (2336) >DATA 20021125 125637 127.0.0.1 SMTP (2336) 354 Start mail input; end with <CRLF>.<CRLF> 20021125 125638 127.0.0.1 SMTP (2336) >. 20021125 125638 127.0.0.1 SMTP (2336) 250 <002901c294c4$b1f6fd50$6b0aa8c0@michelle> Queued mail for delivery 20021125 125638 127.0.0.1 SMTP (2336) rdeliver hotmail.com multiple (5) <[EMAIL PROTECTED]> 69306 20021125 125638 127.0.0.1 SMTP (2336) >QUIT 20021125 125638 127.0.0.1 SMTP (2336) 221 mc7-f17.law1.hotmail.com Service closing transmission channel 20021125 125638 127.0.0.1 SMTP (2336) finished C:\IMail\spool\Q8e82000f0278744b.SMD status=1 |
- Re: [IMail Forum] Relaying mail though server set to no rel... Tor Rognmo
- Re: [IMail Forum] Relaying mail though server set to n... Len Conrad
- Re: [IMail Forum] Relaying mail though server set ... Tor Rognmo
- Re: [IMail Forum] Relaying mail though server ... Len Conrad
- Re: [IMail Forum] Relaying mail though server ... R. Scott Perry
- Re: [IMail Forum] Relaying mail though ser... Tor Rognmo
- [IMail Forum] DNS Error when sending ... Joe Weirather
- Re: [IMail Forum] Relaying mail though server set to n... R. Scott Perry
