-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10 Nov 99, at 16:48, Martin Paulucci wrote: > I had a spammer in my system which sent many mails to many domains, and as > I have tcp.smtp rules it should did it from my own dialups, so I have the > syslog with the following messages.. Is there any way to know the IP from > this guy?. You're showing us logs from qmail. There's nothing about the originator in there. Do you have logs from tcpserver? You should find it in there (by time, and by qp - qp shall be close to qp in the qmail logs). Alternatively, if you have a spam message in your hands (a copy from the queue, or a bounce with full headers), have a look at "Received" lines. > And How can I filter per Subject instead of From???. Beg your pardon? -----BEGIN PGP SIGNATURE----- Version: PGP 6.0.2 -- QDPGP 2.60 Comment: http://community.wow.net/grt/qdpgp.html iQA/AwUBOCmxuVMwP8g7qbw/EQK4YgCffuduWM5p1mLsHghfzm1SgJnlK2UAniI6 LVcG9sQcWzrHAB9O5QUAsDnZ =Sm9o -----END PGP SIGNATURE----- -- Petr Novotny, ANTEK CS [EMAIL PROTECTED] http://www.antek.cz PGP key ID: 0x3BA9BC3F -- Don't you know there ain't no devil there's just God when he's drunk. [Tom Waits]