I received a notice today that my email server has been blacklisted on a few
sites. It looks like it started 11/02. Funny thing is, this server is
fully functional, but not "active". SPAMCOP says that more than 14 users
have identified my as passing spam.
My entire log for 11/02 (at bottom) is only 30KB. That's high, most days
are 3 - 9 KB. The increased activity is due to all of the blacklists
hitting me.
My "Daily Report" shows only 1 message being delivered (confirmed in log as
user = confidential2).
I'm set to: "No Mail Relay"
Allow remote mail to local groups
Check valid sender
Auto-deny possible hack attempts.
According to SPAMCOP, this message was delivered on 11/02:
Return-Path: <[EMAIL PROTECTED]> Delivered-To: x Received: (qmail 21607
invoked from network); 3 Nov 2003 03:42:22 -0000 Received: from unknown
(HELO mailgate.cesmail.net) (192.168.1.101) by blade1.cesmail.net with SMTP;
3 Nov 2003 03:42:22 -0000 Received: (qmail 22526 invoked from network); 3
Nov 2003 03:42:22 -0000 Received: from mail.tor.primus.ca (HELO
zephir.primus.ca) (216.254.136.21) by mailgate.cesmail.net with SMTP; 3 Nov
2003 03:42:22 -0000 Received: from webmail.sentineltrans.net
([63.161.83.70]) by zephir.primus.ca with smtp (Exim 3.36 #3) id
1AGVbh-0005wZ-0A for x; Sun, 02 Nov 2003 22:42:21 -0500 Received: from
[227.6.84.165] by webmail.sentineltrans.net for <x>; Mon, 03 Nov 2003
06:40:08 +0300 Message-ID: <[EMAIL PROTECTED]> From: "Benito
Echols" <[EMAIL PROTECTED]> Reply-To: "Benito Echols"
<[EMAIL PROTECTED]> To: x Subject: Fw:TURN A $21,500 INVESTMENT INTO
$150,000.00 e cfu ub Date: Mon, 03 Nov 03 06:40:08 GMT X-Mailer: Microsoft
Outlook, Build 10.0.2616 MIME-Version: 1.0 Content-Type:
multipart/alternative; boundary="__8024EA_C" X-Priority: 3
X-MSMail-Priority: Normal X-Spam-Checker-Version: SpamAssassin 2.60
(1.212-2003-09-23-exp) on blade1 X-Spam-Level: ***************
X-Spam-Status: hits=15.0 tests=BIZ_TLD,CLICK_BELOW,DATE_SPAMWARE_Y2K,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_40_50,
HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_RED,HTML_FONT_BIG,
HTML_LINK_CLICK_HERE,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,
HTML_TAG_EXISTS_TBODY,LINES_OF_YELLING,MIME_HTML_NO_CHARSET,
MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,UPPERCASE_25_50
version=2.60 X-SpamCop-Checked: 192.168.1.101 216.254.136.21 63.161.83.70
X-SpamCop-Disposition: Blocked bl.spamcop.net
I ran a DNS Report today to make sure those settings were still okay.
Everything was in order including:
PASS Open relay test OK: All of your mailservers appear to be closed to
relaying.
webmail.sentineltrans.net OK: 550 not local host DNSreport.com, not a
gateway
Aside from the one authorized delivery (confidential2), the only authorized
person is my boss "confidential" logging and and out a couple of times from
home. Nothing was sent/received during those logins.
My 11/02 Log:
11:02 00:00 SMTP-(00000000) Checking for daily report
11:02 00:00 SMTP-(00000000) Enumerating counts for daily report
11:02 00:00 SMTP-(00000000) Info - Adding Queue file
D:\IMail\spool\Q03548f6b.CNT
11:02 00:00 SMTP-(00000000) Sending daily report
11:02 00:00 SMTP-(0408000D) processing D:\IMail\spool\Q03548f6b.CNT
11:02 00:00 SMTP-(0408000D) ldeliver webmail.sentineltrans.net ITDept-main
(1) 391
11:02 00:00 SMTP-(0408000D) finished D:\IMail\spool\Q03548f6b.CNT status=1
11:02 00:21 SMTP-(00000000) Info - Queue manager starting Queue run 414
11:02 00:51 SMTP-(00000000) Info - Queue manager starting Queue run 415
11:02 01:21 SMTP-(00000000) Info - Queue manager starting Queue run 416
11:02 01:51 SMTP-(00000000) Info - Queue manager starting Queue run 417
11:02 02:21 SMTP-(00000000) Info - Queue manager starting Queue run 418
11:02 02:51 SMTP-(00000000) Info - Queue manager starting Queue run 419
11:02 03:21 SMTP-(00000000) Info - Queue manager starting Queue run 420
11:02 03:51 SMTP-(00000000) Info - Queue manager starting Queue run 421
11:02 03:56 SMTPD(239A014E) [192.168.0.4] connect 218.187.181.132 port 4281
11:02 03:56 SMTPD(239A014E) [218.187.181.132] HELO 63.161.83.70
11:02 03:56 SMTPD(239A014E) [218.187.181.132] unacceptable mail address in
MAIL FROM:<[EMAIL PROTECTED]>
11:02 04:21 SMTP-(00000000) Info - Queue manager starting Queue run 422
11:02 04:51 SMTP-(00000000) Info - Queue manager starting Queue run 423
11:02 05:21 SMTP-(00000000) Info - Queue manager starting Queue run 424
11:02 05:51 SMTP-(00000000) Info - Queue manager starting Queue run 425
11:02 06:21 SMTP-(00000000) Info - Queue manager starting Queue run 426
11:02 06:52 SMTP-(00000000) Info - Queue manager starting Queue run 427
11:02 07:22 SMTP-(00000000) Info - Queue manager starting Queue run 428
11:02 07:52 SMTP-(00000000) Info - Queue manager starting Queue run 429
11:02 08:22 SMTP-(00000000) Info - Queue manager starting Queue run 430
11:02 08:52 SMTP-(00000000) Info - Queue manager starting Queue run 431
11:02 09:22 SMTP-(00000000) Info - Queue manager starting Queue run 432
11:02 09:52 SMTP-(00000000) Info - Queue manager starting Queue run 433
11:02 09:55 SMTPD(2CB6014E) [192.168.0.4] connect 210.106.34.103 port 2617
11:02 09:55 SMTPD(2CB6014E) [210.106.34.103] HELO none
11:02 09:55 SMTPD(2CB6014E) [210.106.34.103] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 09:55 SMTPD(2CB6014E) [210.106.34.103] RCPT TO:<[EMAIL PROTECTED]>
11:02 09:55 SMTPD(2CB6014E) [210.106.34.103] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 10:22 SMTP-(00000000) Info - Queue manager starting Queue run 434
11:02 10:52 SMTP-(00000000) Info - Queue manager starting Queue run 435
11:02 11:22 SMTP-(00000000) Info - Queue manager starting Queue run 436
11:02 11:52 SMTP-(00000000) Info - Queue manager starting Queue run 437
11:02 12:22 SMTP-(00000000) Info - Queue manager starting Queue run 438
11:02 12:52 SMTP-(00000000) Info - Queue manager starting Queue run 439
11:02 13:22 SMTP-(00000000) Info - Queue manager starting Queue run 440
11:02 13:50 SMTPD(32B0014E) [192.168.0.4] connect 67.125.224.23 port 3385
11:02 13:50 SMTPD(32B0014E) [67.125.224.23] HELO 63.161.83.70
11:02 13:50 SMTPD(32B0014E) [67.125.224.23] MAIL FROM: <[EMAIL PROTECTED]>
11:02 13:50 SMTPD(32B0014E) [67.125.224.23] RCPT TO: <[EMAIL PROTECTED]>
11:02 13:50 SMTPD(32B0014E) [67.125.224.23] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 13:52 SMTP-(00000000) Info - Queue manager starting Queue run 441
11:02 14:23 SMTP-(00000000) Info - Queue manager starting Queue run 442
11:02 14:53 SMTP-(00000000) Info - Queue manager starting Queue run 443
11:02 15:09 SMTPD(34B5014E) [192.168.0.4] connect 69.27.238.37 port 46740
11:02 15:23 SMTP-(00000000) Info - Queue manager starting Queue run 444
11:02 15:25 SMTPD(351C014E) [192.168.0.4] connect 66.114.137.16 port 41752
11:02 15:25 SMTPD(351C014E) send error 10054
11:02 15:25 SMTPD(351C014E) send error 10054
11:02 15:25 SMTPD(351E014E) [192.168.0.4] connect 66.114.137.16 port 19565
11:02 15:25 SMTPD(351E014E) [66.114.137.16] HELO proxyscan2.isomedia.com
11:02 15:25 SMTPD(351E014E) [66.114.137.16] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(351E014E) [66.114.137.16] RCPT
TO:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(351E014E) [66.114.137.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:25 SMTPD(3520014E) [192.168.0.4] connect 207.127.235.46 port 57441
11:02 15:25 SMTPD(3520014E) [207.127.235.46] HELO smtp0.lightlink.com
11:02 15:25 SMTPD(3520014E) [207.127.235.46] MAIL
From:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(3520014E) [207.127.235.46] RCPT
To:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(3520014E) [207.127.235.46] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:25 SMTPD(3522014E) [192.168.0.4] connect 207.127.235.46 port 57443
11:02 15:25 SMTPD(3522014E) [207.127.235.46] HELO smtp0.lightlink.com
11:02 15:25 SMTPD(3522014E) [207.127.235.46] MAIL
From:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(3522014E) [207.127.235.46] RCPT
To:<[EMAIL PROTECTED]>
11:02 15:25 SMTPD(3522014E) [207.127.235.46] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [192.168.0.4] connect 152.163.224.70 port 61281
11:02 15:30 SMTPD(3543014E) [152.163.224.70] HELO ort-r01.mail.aol.com
11:02 15:30 SMTPD(3543014E) [152.163.224.70] MAIL FROM:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] MAIL FROM:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] MAIL FROM:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:30 SMTPD(3543014E) [152.163.224.70] RCPT TO:
<[EMAIL PROTECTED]>
11:02 15:30 SMTPD(3543014E) [152.163.224.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 15:53 SMTP-(00000000) Info - Queue manager starting Queue run 445
11:02 16:03 SMTPD(3618014E) [192.168.0.4] connect 217.35.209.185 port 53376
11:02 16:03 SMTPD(3618014E) [217.35.209.185] EHLO bt.net
11:02 16:03 SMTPD(3618014E) [217.35.209.185] MAIL FROM:<[EMAIL PROTECTED]>
11:02 16:03 SMTPD(3618014E) [217.35.209.185] RCPT TO:<[EMAIL PROTECTED]>
11:02 16:03 SMTPD(3618014E) [217.35.209.185] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 16:23 SMTP-(00000000) Info - Queue manager starting Queue run 446
11:02 16:44 SMTPD(11CC00C0) [192.168.0.4] connect 217.35.209.184 port 45724
11:02 16:44 SMTPD(11CC00C0) [217.35.209.184] EHLO bt.net
11:02 16:44 SMTPD(11CC00C0) [217.35.209.184] MAIL FROM:<[EMAIL PROTECTED]>
11:02 16:44 SMTPD(11CC00C0) [217.35.209.184] RCPT TO:<[EMAIL PROTECTED]>
11:02 16:44 SMTPD(11CC00C0) [217.35.209.184] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 16:53 SMTP-(00000000) Info - Queue manager starting Queue run 447
11:02 17:03 SMTPD(124B00C0) [192.168.0.4] connect 203.86.166.70 port 34818
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] HELO obsl.outblaze.com
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<[EMAIL PROTECTED]>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<"[EMAIL PROTECTED]">
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <"[EMAIL PROTECTED]"
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:[EMAIL PROTECTED]
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user TO:[EMAIL PROTECTED]
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<obsl.outblaze.com!obsl-add2>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <obsl.outblaze.com!obsl-add2
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<nobody>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<nobody>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<nobody>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<nobody>
11:02 17:03 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<obsl.outblaze.com!obsl-test>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<obsl.outblaze.com!obsl-test>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<obsl.outblaze.com!obsl-test>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] unacceptable mail address in
MAIL FROM:<obsl.outblaze.com!obsl-test>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] MAIL FROM:<>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<[EMAIL PROTECTED]>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] MAIL FROM:<>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<"[EMAIL PROTECTED]">
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <"[EMAIL PROTECTED]"
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] MAIL FROM:<>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:[EMAIL PROTECTED]
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user TO:[EMAIL PROTECTED]
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] MAIL FROM:<>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] RCPT
TO:<obsl.outblaze.com!obsl-add2>
11:02 17:04 SMTPD(124B00C0) [203.86.166.70] ERR webmail.sentineltrans.net
invalid user <obsl.outblaze.com!obsl-add2
11:02 17:17 SMTPD(12A300C0) [192.168.0.4] connect 194.97.55.161 port 52934
11:02 17:17 SMTPD(12A300C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A300C0) [194.97.55.161] MAIL
From:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A300C0) [194.97.55.161] RCPT
To:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A300C0) [194.97.55.161] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:17 SMTPD(12A500C0) [192.168.0.4] connect 194.97.55.161 port 52935
11:02 17:17 SMTPD(12A500C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A500C0) [194.97.55.161] MAIL From:<>
11:02 17:17 SMTPD(12A500C0) [194.97.55.161] RCPT
To:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A500C0) [194.97.55.161] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:17 SMTPD(12A600C0) [192.168.0.4] connect 194.97.55.161 port 52938
11:02 17:17 SMTPD(12A600C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A600C0) [194.97.55.161] unacceptable mail address in
MAIL From:<postmaster>
11:02 17:17 SMTPD(12A700C0) [192.168.0.4] connect 194.97.55.161 port 52939
11:02 17:17 SMTPD(12A700C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A700C0) [194.97.55.161] MAIL
From:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A700C0) [194.97.55.161] RCPT
To:<"[EMAIL PROTECTED]">
11:02 17:17 SMTPD(12A700C0) [194.97.55.161] ERR webmail.sentineltrans.net
invalid user <"[EMAIL PROTECTED]"
11:02 17:17 SMTPD(12A800C0) [192.168.0.4] connect 194.97.55.161 port 52940
11:02 17:17 SMTPD(12A800C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A800C0) [194.97.55.161] MAIL
From:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A800C0) [194.97.55.161] RCPT
To:<[EMAIL PROTECTED]@[63.161.83.70]>
11:02 17:17 SMTPD(12A800C0) [194.97.55.161] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]@[63.161.83
11:02 17:17 SMTPD(12A900C0) [192.168.0.4] connect 194.97.55.161 port 52941
11:02 17:17 SMTPD(12A900C0) [194.97.55.161] HELO mtrap.freenet.de
11:02 17:17 SMTPD(12A900C0) [194.97.55.161] MAIL
From:<[EMAIL PROTECTED]>
11:02 17:17 SMTPD(12A900C0) [194.97.55.161] RCPT
To:<"[EMAIL PROTECTED]"@webmail.sentineltrans.net>
11:02 17:17 SMTPD(12A900C0) [194.97.55.161] ERR webmail.sentineltrans.net
invalid user <"[EMAIL PROTECTED]"@webmail.
11:02 17:19 SMTPD(12B700C0) [192.168.0.4] connect 216.160.202.2 port 27754
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] EHLO asmtp.rainbo.com
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] MAIL From: <[EMAIL PROTECTED]>
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] RCPT To:
<[EMAIL PROTECTED]>
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] RCPT To: <[EMAIL PROTECTED]>
11:02 17:19 SMTPD(12B700C0) [216.160.202.2] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 17:23 SMTP-(00000000) Info - Queue manager starting Queue run 448
11:02 17:53 SMTP-(00000000) Info - Queue manager starting Queue run 449
11:02 18:23 SMTP-(00000000) Info - Queue manager starting Queue run 450
11:02 18:53 SMTP-(00000000) Info - Queue manager starting Queue run 451
This is a vaild employee:
11:02 18:57 SMTPD(153500C0) [192.168.0.4] connect 38.200.3.17 port 57762
11:02 18:57 SMTPD(153500C0) [38.200.3.17] EHLO spool1.ss.herndon.psi.net
11:02 18:57 SMTPD(153500C0) [38.200.3.17] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 18:57 SMTPD(153500C0) [38.200.3.17] RCPT
TO:<[EMAIL PROTECTED]>
11:02 18:57 SMTPD(153500C0) [38.200.3.17]
D:\IMail\spool\D99f3153500c0d18c.SMD 4463
11:02 18:57 SMTPD(153500C0) performing antispam checks
11:02 18:58 SMTP-(00000000) Info - Adding Queue file
D:\IMail\spool\Q99f3153500c0d18c.SMD
11:02 18:58 SMTP-(0408000E) processing D:\IMail\spool\Q99f3153500c0d18c.SMD
11:02 18:58 SMTP-(0408000E) ldeliver webmail.sentineltrans.net
confidential2-main (1) [EMAIL PROTECTED] 4463
11:02 18:58 SMTP-(0408000E) finished D:\IMail\spool\Q99f3153500c0d18c.SMD
status=1
This was the blacklist notification message I received today (2 copies)
Postmaster addressed was accepted, other guesses denied.
11:02 18:59 SMTPD(154200C0) [192.168.0.4] connect 195.86.128.45 port 4122
11:02 18:59 SMTPD(154200C0) [195.86.128.45] EHLO kes.wirehub.nl
11:02 18:59 SMTPD(154200C0) [195.86.128.45] MAIL
From:<[EMAIL PROTECTED]>
11:02 18:59 SMTPD(154200C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 18:59 SMTPD(154200C0) [195.86.128.45] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 18:59 SMTPD(154200C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 18:59 SMTPD(154200C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 18:59 SMTPD(154200C0) [195.86.128.45] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 18:59 SMTPD(154200C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 18:59 SMTPD(154200C0) [195.86.128.45]
D:\IMail\spool\D9a5d154200c071a0.SMD 3292
11:02 18:59 SMTPD(154200C0) performing antispam checks
11:02 18:59 SMTP-(00000000) Info - Adding Queue file
D:\IMail\spool\Q9a5d154200c071a0.SMD
11:02 18:59 SMTP-(0408000F) processing D:\IMail\spool\Q9a5d154200c071a0.SMD
11:02 18:59 SMTP-(0408000F) ldeliver webmail.sentineltrans.net
confidential3(1) [EMAIL PROTECTED] 3292
11:02 18:59 SMTP-(0408000F) ldeliver webmail.sentineltrans.net root-main (1)
[EMAIL PROTECTED] 3292
11:02 18:59 SMTP-(0408000F) finished D:\IMail\spool\Q9a5d154200c071a0.SMD
status=1
11:02 19:02 SMTPD(155900C0) [192.168.0.4] connect 195.86.128.45 port 2160
11:02 19:02 SMTPD(155900C0) [195.86.128.45] EHLO kes.wirehub.nl
11:02 19:02 SMTPD(155900C0) [195.86.128.45] MAIL
From:<[EMAIL PROTECTED]>
11:02 19:02 SMTPD(155900C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 19:02 SMTPD(155900C0) [195.86.128.45] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 19:02 SMTPD(155900C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 19:02 SMTPD(155900C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 19:02 SMTPD(155900C0) [195.86.128.45] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 19:02 SMTPD(155900C0) [195.86.128.45] RCPT
To:<[EMAIL PROTECTED]>
11:02 19:02 SMTPD(155900C0) [195.86.128.45]
D:\IMail\spool\D9b2e155900c09fc6.SMD 3288
11:02 19:02 SMTPD(155900C0) performing antispam checks
11:02 19:03 SMTP-(00000000) Info - Adding Queue file
D:\IMail\spool\Q9b2e155900c09fc6.SMD
11:02 19:03 SMTP-(04080010) processing D:\IMail\spool\Q9b2e155900c09fc6.SMD
11:02 19:03 SMTP-(04080010) ldeliver webmail.sentineltrans.net confidential3
(1) [EMAIL PROTECTED] 3288
11:02 19:03 SMTP-(04080010) ldeliver webmail.sentineltrans.net root-main (1)
[EMAIL PROTECTED] 3288
11:02 19:03 SMTP-(04080010) finished D:\IMail\spool\Q9b2e155900c09fc6.SMD
status=1
11:02 19:16 SMTPD(15B500C0) [192.168.0.4] connect 194.72.6.50 port 52940
11:02 19:16 SMTPD(15B500C0) [194.72.6.50] EHLO bt.net
11:02 19:16 SMTPD(15B500C0) [194.72.6.50] MAIL FROM:<[EMAIL PROTECTED]>
11:02 19:16 SMTPD(15B500C0) [194.72.6.50] RCPT TO:<[EMAIL PROTECTED]>
11:02 19:16 SMTPD(15B500C0) [194.72.6.50] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 19:17 SMTPD(15BA00C0) [192.168.0.4] connect 194.72.6.62 port 45743
11:02 19:17 SMTPD(15BA00C0) [194.72.6.62] EHLO bt.net
11:02 19:17 SMTPD(15BA00C0) [194.72.6.62] MAIL FROM:<[EMAIL PROTECTED]>
11:02 19:17 SMTPD(15BA00C0) [194.72.6.62] RCPT TO:<[EMAIL PROTECTED]>
11:02 19:17 SMTPD(15BA00C0) [194.72.6.62] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 19:23 SMTP-(00000000) Info - Queue manager starting Queue run 452
11:02 19:31 SMTPD(161600C0) [0.0.0.0] connect 218.17.92.156 port 3221
11:02 19:31 SMTPD(161600C0) send error 10054
11:02 19:31 SMTPD(161600C0) send error 10054
11:02 19:53 SMTP-(00000000) Info - Queue manager starting Queue run 453
This is my boss...
11:02 19:57 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 19:57 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 20:02 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:02 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 20:07 POP3D (00000620) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:07 POP3D (00000620) logoff for confidential R:0, D:0, P:0
11:02 20:12 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:12 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:17 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:17 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:22 SMTPD(176200C0) [192.168.0.4] connect 63.161.83.70 port 4176
11:02 20:22 SMTPD(176200C0) [63.161.83.70] EHLO 63.161.83.70
11:02 20:22 SMTPD(176200C0) [63.161.83.70] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:22 SMTPD(176200C0) [63.161.83.70] RCPT To:<[EMAIL PROTECTED]>
11:02 20:22 SMTPD(176200C0) [63.161.83.70] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 20:22 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:22 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:23 SMTP-(00000000) Info - Queue manager starting Queue run 454
11:02 20:27 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:27 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:28 SMTPD(178800C0) [192.168.0.4] connect 213.130.33.16 port 2890
11:02 20:28 SMTPD(178800C0) [213.130.33.16] HELO boca.verio.net
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 20:28 SMTPD(178800C0) [213.130.33.16] unacceptable mail address in
MAIL From: <bounced>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From: <>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<"openrelay%boca.verio.net">
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <"openrelay%boca.verio.net"
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<"[EMAIL PROTECTED]"@webmail.sentineltrans.net>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <"[EMAIL PROTECTED]"@webmail.sentineltran
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<@webmail.sentineltrans.net:[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]@webmail.sentineltrans.
11:02 20:28 SMTPD(178800C0) [213.130.33.16] MAIL From:
<[EMAIL PROTECTED]>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] RCPT To:
<[EMAIL PROTECTED]@webmail.sentineltrans.net>
11:02 20:28 SMTPD(178800C0) [213.130.33.16] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]@webmail.sentineltrans.
My boss again....
11:02 20:32 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:32 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:37 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:37 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 20:42 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:42 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 20:48 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:48 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 20:53 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:53 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 20:53 SMTP-(00000000) Info - Queue manager starting Queue run 455
11:02 20:58 POP3D (00000150) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 20:58 POP3D (00000150) logoff for confidential R:0, D:0, P:0
11:02 21:03 POP3D (00000150) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:03 POP3D (00000150) logoff for confidential R:0, D:0, P:0
11:02 21:04 SMTPD(187400C0) [192.168.0.4] connect 165.212.13.20 port 56903
11:02 21:04 SMTPD(187400C0) [165.212.13.20] EHLO badvg020
11:02 21:04 SMTPD(187400C0) [165.212.13.20] MAIL
FROM:<[EMAIL PROTECTED]>
11:02 21:04 SMTPD(187400C0) [165.212.13.20] RCPT TO:<[EMAIL PROTECTED]>
11:02 21:04 SMTPD(187400C0) [165.212.13.20] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 21:08 POP3D (00000620) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:08 POP3D (00000620) logoff for confidential R:0, D:0, P:0
11:02 21:13 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:13 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 21:18 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:18 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 21:23 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:23 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 21:23 SMTP-(00000000) Info - Queue manager starting Queue run 456
11:02 21:28 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:28 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 21:32 SMTPD(192A00C0) [192.168.0.4] connect 64.71.150.66 port 36122
11:02 21:33 POP3D (000001DC) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:33 POP3D (000001dc) logoff for confidential R:0, D:0, P:0
11:02 21:36 SMTPD(194400C0) [192.168.0.4] connect 165.201.70.119 port 49499
11:02 21:36 SMTPD(194400C0) [165.201.70.119] EHLO KSLEG1.STATE.KS.US
11:02 21:36 SMTPD(194400C0) [165.201.70.119] MAIL From:
<[EMAIL PROTECTED]>
11:02 21:36 SMTPD(194400C0) [165.201.70.119] RCPT To:
[EMAIL PROTECTED]
11:02 21:36 SMTPD(194400C0) [165.201.70.119] ERR webmail.sentineltrans.net
invalid user To: [EMAIL PROTECTED]
11:02 21:36 SMTPD(194400C0) [165.201.70.119] RCPT To: <[EMAIL PROTECTED]>
11:02 21:36 SMTPD(194400C0) [165.201.70.119] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 21:36 SMTPD(194600C0) [192.168.0.4] connect 69.27.238.36 port 53508
11:02 21:38 POP3D (00000168) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:38 POP3D (00000168) logoff for confidential R:0, D:0, P:0
11:02 21:43 POP3D (00000168) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:43 POP3D (00000168) logoff for confidential R:0, D:0, P:0
11:02 21:48 POP3D (00000190) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:48 POP3D (00000190) logoff for confidential R:0, D:0, P:0
11:02 21:53 SMTPD(19B600C0) [192.168.0.4] connect 64.62.221.2 port 47968
11:02 21:53 SMTP-(00000000) Info - Queue manager starting Queue run 457
11:02 21:54 POP3D (00000620) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:54 POP3D (00000620) logoff for confidential R:0, D:0, P:0
11:02 21:59 POP3D (000007E0) logon success for confidential
webmail.sentineltrans.net from 151.197.23.39
11:02 21:59 POP3D (000007e0) logoff for confidential R:0, D:0, P:0
11:02 22:23 SMTP-(00000000) Info - Queue manager starting Queue run 458
11:02 22:32 SMTPD(1AB500C0) [192.168.0.4] connect 216.104.96.79 port 30619
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] EHLO mxin.personainternet.com
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] MAIL From:
<[EMAIL PROTECTED]>
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] RCPT To: <[EMAIL PROTECTED]>
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] RCPT To: <[EMAIL PROTECTED]>
11:02 22:32 SMTPD(1AB500C0) [216.104.96.79] ERR webmail.sentineltrans.net
invalid user <[EMAIL PROTECTED]
11:02 22:53 SMTP-(00000000) Info - Queue manager starting Queue run 459
11:02 23:23 SMTPD(1C0300C0) [192.168.0.4] connect 211.74.66.216 port 1547
11:02 23:23 SMTPD(1C0300C0) [211.74.66.216] HELO 63.161.83.70
11:02 23:23 SMTPD(1C0300C0) [211.74.66.216] unacceptable mail address in
MAIL FROM:<[EMAIL PROTECTED]>
11:02 23:23 SMTP-(00000000) Info - Queue manager starting Queue run 460
11:02 23:53 SMTP-(00000000) Info - Queue manager starting Queue run 461
11:03 00:00 SMTP-(00000000) Info - Re-reading delivery settings
Any help would be apprecited.
Thanks!
~Amy
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
