Please see my previous email: "funnyness with check.cgi" if necessary...
What we're seeing is a spammer who's sending mail by an smtp connection to exim from the localhost (127.0.0.1). The logs don't show us what user is making the connection. We really need to allow mail from 127.0.0.1 or our webmail won't work. Any ideas on how we can search this? Thanks. Jeff -- Jeff Lasman, Nobaloney Internet Services P.O. Box 52200, Riverside, CA 92517 Our jplists address used on lists is for list email only voice: +1 951 643-5345, or see: "http://www.nobaloney.net/contactus.html"
