On 12/11/2019 8:14 AM, Tahnan Al Anas wrote:
That I see in qmail send log
On Wed, 11 Dec 2019, 8:06 pm Eric Broch, <ebr...@whitehorsetc.com
On 12/11/2019 1:26 AM, Tahnan Al Anas wrote:
Can you tell me why I am seeing all outgoing getting out with
Muhammad Tahnan Al Anas
On Wed, Dec 11, 2019 at 1:25 AM <bhow...@teamft.com
I have checked out authentication with my submission port 587
and I must authenticate before sending. However, I have
entries in the log from a “bad guy IP address” which say
“sender accepted” and its giving me heartburn.
2019-12-10 02:43:04.376530500 CHKUSER accepted sender: from
remote <4vFoWf3:unknown:22.214.171.124> rcpt <> : sender accepted
2019-12-10 03:04:09.269688500 CHKUSER accepted sender: from
<3aJfz4D7:unknown:126.96.36.199> rcpt <> : sender accepted
(Note: the IP 188.8.131.52 is the real IP of the bad guy)
There are no corresponding lines which say, “client allowed
Note after the from address, there are two colons:
<someb...@irtc.net::> <mailto:someb...@irtc.net::> . On all
legitimate entries, there are no such double colons.
How did this guy get that entry into my submission logs
without authenticating? Is this something I need to worry about?
Any input would be really appreciated
Foundaton Technologies, LLC