Scott, > You actually helped us find the problem by removing the IP of your firewall Well, it is 195.65.117.4
Your hint about the Firewall helped to find out what was going on: After looking through the FW-logs I see that the traffic originates from the inside (someone checking a pop3-box in .at and sending messages with this particular sender address). It was no spammer / no relaying then. However, I still can't see any smtp-authentication for these SMTPD processes. Is it possible that the smtp authentication has its own process identifier, different from the identifier we see in the rest of the transaction? Thanks Chris To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
