Ah, I missed the "to AOL" part.we have our relaying set to Relay for Address but we have been hit the last couple days with dictionary attacks to AOL though our server...
That means that this is definitely NOT a dictionary attack. It is just a standard hijacking of your mailserver by a spammer.
In this case, you need to:
[1] Check to see what your anti-relay settings are; make sure they are "Relay for Addresses" or "No Mail Relay".
[2] Check your log files to see the IP address that the E-mail came from, and see if that IP is authorized
[3] Check your log files to see if the user authenticated.
The interesting part here is that you seem sure that this is someone that you did not authorize to use your server -- why do you think that?
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
