On 3/13/03 2:32 PM, Marc Catuogno wrote: > Just a shot in the dark but is it possible that this user is deliberately > sending the spam? > If not I'd try disabling the account for a few hours and see if the problem > persists. Then I'd change the password again to something like [EMAIL PROTECTED] > (you get the idea) and NOT tell the user. Instead say that there is a server > problem and the e-mail will be down for a day (or a few hours). Then give > her the new password and see if it starts up again. > > Don't e-mail her the new password, call her, because if someone has access > to her login you could be e-mailing the spammer the new password as well....
I do not think she would know how to send spam on her own. I did call her and changed her password over the phone a coupe hours back and still see activity on her account: 03:13 17:24 SMTPD(004A001E) [67.3.86.115] HELO Egl 03:13 17:24 SMTPD(004A001E) [67.3.86.115] MAIL FROM: <[EMAIL PROTECTED] > 03:13 17:24 SMTPD(004A001E) [67.3.86.115] RCPT TO:<[EMAIL PROTECTED]> 03:13 17:24 SMTPD(004A001E) [67.3.86.115] ERR sgdesign.net invalid user <[EMAIL PROTECTED] I'm concerned about the ERR message. Maybe this is only an attempt and subsequent failure due to the proper No Relay settings? Make sense or does the "MAIL FROM" mean the email got through? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
