Scott, it is possible a hacker found the password to the account, I've spoken to Michelle (users are responsible for setting their own passwords) and hers was as easy to guess as possible. There are no users directly connected to the mail server. They are all set up to use their ISP for smtp - in this case a local cable internet company. I've verified that michelle has the cable's smpt server in her sendmail setting. So I still have no idea of how she would show up as sending mail from the server. She's even located about 1200 miles away, at a branch office, and they are not on a vpn. In that case, since our SMTP setting is No mail relay, I'm still looking for answers. Tor
----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 25, 2002 5:07 PM Subject: Re: [IMail Forum] Relaying mail though server set to no relay > > >Also, I'm still curious as to why anyone should be able to send mail from > >the server when it's set to not relay mail (local host only is deselected). > > "Relay for addresses" and "No mail relay" are the only two safe > options. However: > > >20021125 125624 127.0.0.1 SMTPD (000F0278) [207.232.106.104] connect > >68.144.82.226 port 61085 > >20021125 125624 127.0.0.1 SMTPD (000F0278) [68.144.82.226] EHLO michelle > >20021125 125624 127.0.0.1 SMTPD (000006E4) Authenticated > >[EMAIL PROTECTED], session treated as local. > >20021125 125625 127.0.0.1 SMTPD (000F0278) [68.144.82.226] MAIL > >FROM: <[EMAIL PROTECTED]> > > it appears that [EMAIL PROTECTED] really did send the E-mail (it's impossible > to say with 100% certainty, since IMail uses a separate thread for the > authentication, but it's probably 99% chance). Another possibility is that > a spammer found the password to that account, but that is extremely unlikely. > > -Scott > --- > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > IMail. http://www.declude.com > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
