Do you have some kind of gateway set up that your IMail server will relay for? They could be hitting that
Eric S ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 17, 2003 11:11 AM Subject: Re: [IMail Forum] Dictionary Attack? > > >we have our relaying set to Relay for Address but we have been hit the last > >couple days with dictionary attacks to AOL though our server... > > Ah, I missed the "to AOL" part. > > That means that this is definitely NOT a dictionary attack. It is just a > standard hijacking of your mailserver by a spammer. > > In this case, you need to: > > [1] Check to see what your anti-relay settings are; make sure they are > "Relay for Addresses" or "No Mail Relay". > [2] Check your log files to see the IP address that the E-mail came from, > and see if that IP is authorized > [3] Check your log files to see if the user authenticated. > > The interesting part here is that you seem sure that this is someone that > you did not authorize to use your server -- why do you think that? > > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no > annual licensing fees. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
