Thanks Len Ok this is the preceeding part of the log, does that tell you where it's coming from? Until I figure out what these log entries mean I'm holding all possibilities open, including that michelle (mduffy) did send this out. However, given that the reason I looked at the log today was that our mailserver ground to a halt, I also have to consider the possibility it was hijacked by an outside source. Also, I'm still curious as to why anyone should be able to send mail from the server when it's set to not relay mail (local host only is deselected). Tor
20021125 125624 127.0.0.1 SMTPD (000F0278) [207.232.106.104] connect 68.144.82.226 port 61085 20021125 125624 127.0.0.1 SMTPD (000F0278) [68.144.82.226] EHLO michelle 20021125 125624 127.0.0.1 SMTPD (000006E4) Authenticated [EMAIL PROTECTED], session treated as local. 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] MAIL FROM: <[EMAIL PROTECTED]> 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125634 127.0.0.1 SMTPD (000F0278) [68.144.82.226] MAIL FROM: <[EMAIL PROTECTED]> 20021125 125634 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125634 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125634 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125634 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125635 127.0.0.1 SMTPD (000F0278) [68.144.82.226] RCPT TO: <[EMAIL PROTECTED]> 20021125 125637 127.0.0.1 SMTPD (000F0278) [68.144.82.226] C:\IMail\spool\D8e82000f0278744b.SMD 69306 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
