Hi all,
Recently seen a spurt in spam going out from my server.
What I have seen is that in such cases, this is the log.

CHKUSER relaying rcpt: from <xx...@sail-steel.com:rmfpwr:> remote <k.st:unknown:183.5.232.68> rcpt <yangjuan...@qq.com> : client allowed to relay

Now, in my tcp.smtp, this client is not allowed to relay. So am stumped as to how this client is allowed to relay ? A small investigation showed up that the To address in such mails is coming as below :

simscan:[5907]:RELAYCLIENT:1.8346s:-:183.5.232.68:xx...@sail-steel.com:905690...@qq.com,1047623...@qq.com,z...@job20.com,285090...@qq.com,cq445_...@qq.com,huajing-2...@qq.com,4559...@qq.com

There is a : in the to line. Is that causing the problem ?

My server is accepting this, trying to deliver, failing, and bouncing to users in my domain ...

Thanx

Anand

---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Reply via email to