Matt, The snippet of the log you sent only shows incoming messages being accepted for the [EMAIL PROTECTED] .You tell this from the SMTPD stamp on the log lines. To continue to follow the threads of the message look for the lines that say "processing QD920a042.SMD for the first one, Q9207042.SMD for the second, etc"
Hope this helps Eric S ----- Original Message ----- From: "imaillist" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, December 14, 2002 8:40 PM Subject: [IMail Forum] is this a relay attempt? > I've got a user reporting to me he's getting dozens of daily messages in > his postmaster account voicing a standard 'invalid user message, where > his own address is the invalid user. Below is a sample of what looks to > be a block of three messages going to him. The first IP is my mail > server, the other is an AT&T broadband dialup (cable modem?) IP. > > I don't know imail logs well enough to say for sure... whats going on > here? This is the entire block in the log belonging to this action. > Any advice would be greatly appreciated. > > --Matt-- > > 12:14 12:18 SMTPD(00AE0042) [216.198.221.162] connect 24.127.137.205 > port 1253 > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] HELO computerd.com > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] MAIL from:<> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] RCPT > to:<[EMAIL PROTECTED]> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] C:\IMail\spool\D920a042.SMD > 2568 > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] MAIL from:<> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] RCPT > to:<[EMAIL PROTECTED]> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] C:\IMail\spool\D9207042.SMD > 2565 > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] MAIL from:<> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] RCPT > to:<[EMAIL PROTECTED]> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] C:\IMail\spool\D920b042.SMD > 2094 > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] MAIL from:<> > 12:14 12:18 SMTPD(00AE0042) [24.127.137.205] RCPT > to:<[EMAIL PROTECTED]> > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
