My server hang this morning and I had to reboot the server. After rebooting I found thousands of .gse and .smd files in the spool directory ...
What anti-relay setting are you using ("Relay for Addresses" or "No mail relay")?
03:28 09:19 SMTPD(0ECE0034) [202.71.162.61] connect 65.247.177.24 port 1072...
03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] EHLO mxs.mail.ru
03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] MAIL From: <[EMAIL PROTECTED]>
03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]>
03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED]
This shows IMail rejecting the mail the spammer is trying to send. What you need are the log file entries where IMail accepts the E-mail (the "SMDPD" lines that have a spool file name in them).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
