Hi Eric, Can you tell me why I am seeing all outgoing getting out with below log?
success: User_and_password_not_set,_continuing_without_authentication./ -- -- Best Regards Muhammad Tahnan Al Anas On Wed, Dec 11, 2019 at 1:25 AM <[email protected]> wrote: > I have checked out authentication with my submission port 587 and I must > authenticate before sending. However, I have entries in the log from a “bad > guy IP address” which say “sender accepted” and its giving me heartburn. > > > > 2019-12-10 02:43:04.376530500 CHKUSER accepted sender: from > <[email protected]::> remote <4vFoWf3:unknown:64.225.41.10> rcpt <> > : sender accepted > > 2019-12-10 03:04:09.269688500 CHKUSER accepted sender: from > <[email protected]::> remote <3aJfz4D7:unknown:64.225.41.10> rcpt > <> : sender accepted > > > > (Note: the IP 64.255.41.10 is the real IP of the bad guy) > > > > There are no corresponding lines which say, “client allowed to relay” > > > > Note after the from address, there are two colons: <[email protected]::> > . On all legitimate entries, there are no such double colons. > > > > How did this guy get that entry into my submission logs without > authenticating? Is this something I need to worry about? > > > > > > Any input would be really appreciated > > > > Boatner Howell > > Foundaton Technologies, LLC > > >
