-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10 Nov 99, at 16:48, Martin Paulucci wrote:
> I had a spammer in my system which sent many mails to many domains, and as
> I have tcp.smtp rules it should did it from my own dialups, so I have the
> syslog with the following messages.. Is there any way to know the IP from
> this guy?.

You're showing us logs from qmail. There's nothing about the 
originator in there. Do you have logs from tcpserver? You should 
find it in there (by time, and by qp - qp shall be close to qp in the 
qmail logs).

Alternatively, if you have a spam message in your hands (a copy 
from the queue, or a bounce with full headers), have a look at 
"Received" lines.

> And How can I filter per Subject instead of From???.

Beg your pardon?

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2 -- QDPGP 2.60 
Comment: http://community.wow.net/grt/qdpgp.html

iQA/AwUBOCmxuVMwP8g7qbw/EQK4YgCffuduWM5p1mLsHghfzm1SgJnlK2UAniI6
LVcG9sQcWzrHAB9O5QUAsDnZ
=Sm9o
-----END PGP SIGNATURE-----
--
Petr Novotny, ANTEK CS
[EMAIL PROTECTED]
http://www.antek.cz
PGP key ID: 0x3BA9BC3F
-- Don't you know there ain't no devil there's just God when he's drunk.
                                                             [Tom Waits]

Reply via email to