A few things come to my mind here, and to sum up many of the other's posts.
1. In the mail logs, you will have the IP of this "Spammer" every time they connected to your mail server and sent this spam. 2. Since he is dialed into "YOUR" ISP, you should also have records to indicate what IP was assigned to what user. Just match the IP from the mail log to the IP of your dial-in record and terminate this user for abuse. 3. Implement SMTP Auth and once again you will have the log's of the offending party and then you kick them off your service. Steven > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Magdy Ibrahim > Sent: Monday, February 24, 2003 9:09 AM > To: [EMAIL PROTECTED] > Subject: Re: OSRELAY:Re: [IMail Forum] SMTP Problem (conclussion)! > > > Scott, > Here is my case: > 1- "Anyone" here means the person who has not real account on my mail > server... > 2- He connected to the internet using my ISP that means with IP address > listed in my SMTP relay for addresses. > 3- He opened his Outlook express and configured a new account named > "spammer" which is not on my mail server and configured his outgoing mail > server as: Mail.MyDomain.Com > and start sending from it to my local users.... > this is the case Scott in breif..... > The account [EMAIL PROTECTED] does not exist on my mail server, however > it's able to use my SMTP to send emails to the local users, while I > prevented it from sending to outer users... > How to prevent such case... > why [EMAIL PROTECTED] can send to my local users... > It's not a real account.... It cannot authenticated from my server.. then > how it works and how it access my local users????? > This the problem Scott.. > I hope you understand me now.. > Many thanx for your time > > Regards,, > Magdy > > > ----- Original Message ----- > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, February 24, 2003 4:20 PM > Subject: Re: OSRELAY:Re: [IMail Forum] SMTP Problem (conclussion)! > > > > > > >The final Conclusion is: > > >1- We can prevent anyone from using my mail server to spam people.. > > >2- We cannot prevent anyone from using my mail server to spam my local > users > > >if he dailed in with my IPs.. > > >The first problem solved..... > > > > > >But the second one still a problem and still that spammer can > access your > > >local users and send them his mails... > > >The question now, is there any wayor method to prevent such > spammer from > > >using the second case?? > > > > Can you please clarify *exactly* what you are looking for? In > one E-mail, > > you seemed surprised that anyone could send E-mail *to* your > local users, > > but then you said "I did not say that I want to prevent anyone from send > to > > my local users...". > > > > Now, you are saying that you want to prevent people from sending mail to > > your local users. > > > > Are you just looking to block spam (note that all spam to your > users, just > > like all legitimate mail to your users, will go through your > > mailserver)? To do that, you have several options: > > > > [1] Manually, using IMail's filters, Control Access file, and Kill List > > (free, but very time consuming), or > > [2] Use a spam control product, such as our Declude JunkMail or IMGate. > > > > The third option, of course, is to prevent people from using your > > mailserver to send mail to your local users -- but then they > will receive > > no mail. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > > Declude Virus: Catches both viruses and vulnerabilities in > E-mail, with no > > annual licensing fees. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
