Thank you for the response Sandy.

I am one of those positions where I have tried so many different things my
head is spinning plus irritated clients don't help.

Notes posted below:


On 3/13/03 1:32 PM, Sanford Whiteman  wrote:

>> No Mail Relay is selected in the SMTP settings of Imail (7.14)
> 
> 'No Mail Relay' = AUTHed and IWEBMSG users may relay, BTW.

Ok. 


 
>> ...I found it to confirm a relay of the intended email address if it
>> is  one  from  my server.
> 
> Local delivery is not relaying. :)

But when the relay attempt is one of these test sites it is not really a
local relay as they need entrance from the outside.


 
>>  If  it  is on another location I have gotten messages that elude to
>>  no relay being allowed.
> 
> Uh-huh.

So this is partially good right?



 
>> We've now been blocked by AOL and do not know what else to do.
> 
> Someone will surely post the AOL "how to get off our list" URL.


I went to the AOL postmaster site and submitted our IP address for review.


 
> What's  missing from your post, as is common: logs. Where was the mail
> submitted  from,  who  was  authenticated at the time, etc. There have
> been  increasing  reports  of  hacker-spammers guessing and using AUTH
> passwords,  which  was unthinkable even a year ago. Makes ya sick, but
> you  have  to  realize  that once they've got a local username to work
> with, that's a good head start.

Here is a recent log record:

03:13 16:16 POP3D  (00000140) logon success for elisa cleanfunpromo.com
from 208.57.69.37

The IP is NOT my clients and I even changed her password an hour ago. But
yet a review of the logs will show this account being targeted over and over
all day from different Ips

Here are a few more logs I just pulled:

03:13 16:44 SMTPD(0014005E) [12.228.205.39] MAIL FROM:
<[EMAIL PROTECTED] >

03:13 16:45 SMTPD(00010064) [12.228.205.39] MAIL FROM:
<[EMAIL PROTECTED] >

03:13 16:45 SMTPD(00120060) [66.214.132.168] MAIL FROM:
<[EMAIL PROTECTED] >

03:13 16:46 SMTPD(00140060) [80.212.165.253] MAIL FROM:
[EMAIL PROTECTED]

03:13 16:46 POP3D  (00000174)  logon failure for elisa cleanfunpromo.com
from 208.57.69.37

03:13 16:46 SMTPD(001A005E) [12.228.205.39] MAIL FROM:
<[EMAIL PROTECTED] >

03:13 16:47 SMTPD(001C005E) [66.214.132.168] MAIL FROM:
[EMAIL PROTECTED]

03:13 16:50 SMTPD(00040036) [216.218.69.68] MAIL FROM:
<[EMAIL PROTECTED] >





Regards, 


Steve Guluk
SGDesign
(949) 661-9333
ICQ: 7230769





To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to