Sorry, false alarm. First I tought the messages are comming from different servers because there was a lot of different IP's in the last days. However it looks like this messages are comming all from the same home computer and was send from dialup-IP's.
The user has configured our smtp-server for outgoing messages but hasn't activated SMTP-Auth. There are a lot of real email-recipients, but also some containing only special characters. The sender-adress is even "<>". Looks like this guy has an email worm on his computer... Markus > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Guy Isabel > Sent: Tuesday, June 24, 2003 9:06 PM > To: [EMAIL PROTECTED] > Subject: Re: [IMail Forum] strange rcpt to string > > > Still curious about this. In addition to Scott's > recommendations, what happens if you telnet to ip.ad.dr.es on > port 25? What does the SMTP banner look like? What are the > server's responses to MAIL FROM:<> and RCPT > TO:[EMAIL PROTECTED] Do you see similarly garbled strings? > > Guy > -- > Guy Isabel <[EMAIL PROTECTED]> > > ----- Original Message ----- > From: "Markus" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, June 24, 2003 14:14 > Subject: [IMail Forum] strange rcpt to string > > > Has anyone seen recipient-strings like this? > > > 06:24 15:11 SMTPD(0FDB0020) [ip.ad.dr.es] MAIL FROM: <> > 06:24 15:11 SMTPD(0FDB0020) [ip.ad.dr.es] RCPT TO: < > [EMAIL PROTECTED] > ñªägÕ€Ð)¥v\îŸ`f„ÇÙx¹¸6Ž]QÛ‘l2/[EMAIL PROTECTED] > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%> 40list.ipswitch.com/ > > Knowledge Base/FAQ: > http://www.ipswitch.com/support/IMail/ > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
