Re: question on smtp AUTH

2007-01-14 Thread Matthew Seaman
David Banning wrote: That would seem to suggest that the spam is being sent using an authorized account, however, is it possible that a host inside your network is sending the spam? Thanks for that test Paul. I do believe that it could have been a virus infected windows box. I am not

question on smtp AUTH

2007-01-13 Thread David Banning
I am still pouring over logs to check how my server has been spamming. I am wondering about the possibility of someone using a working login and password to send spam through my server. So here is my question; I look at my maillog and see the following spam; maillog.0:Jan 11 02:14:17 3s1

Re: question on smtp AUTH

2007-01-13 Thread Paul Schmehl
--On January 13, 2007 1:08:17 PM -0500 David Banning [EMAIL PROTECTED] wrote: I am still pouring over logs to check how my server has been spamming. I am wondering about the possibility of someone using a working login and password to send spam through my server. So here is my question; I

Re: question on smtp AUTH

2007-01-13 Thread John Levine
I am wondering about the possibility of someone using a working login and password to send spam through my server. So here is my question; That's depressingly common. Look for abandoned or unused accounts like guest/guest. R's, John ___

Re: question on smtp AUTH

2007-01-13 Thread Paul Schmehl
--On January 13, 2007 6:34:17 PM -0500 David Banning [EMAIL PROTECTED] wrote: That would seem to suggest that the spam is being sent using an authorized account, however, is it possible that a host inside your network is sending the spam? Thanks for that test Paul. I do believe that it

Re: question on smtp AUTH

2007-01-13 Thread David Banning
That would seem to suggest that the spam is being sent using an authorized account, however, is it possible that a host inside your network is sending the spam? Thanks for that test Paul. I do believe that it could have been a virus infected windows box. I am not convinced now. I -do- know

Re: question on smtp AUTH

2007-01-13 Thread Jonathan Horne
On Saturday 13 January 2007 12:08, David Banning wrote: I am still pouring over logs to check how my server has been spamming. I am wondering about the possibility of someone using a working login and password to send spam through my server. So here is my question; I look at my maillog and

Re: question on smtp AUTH

2007-01-13 Thread jdow
From: John Levine [EMAIL PROTECTED] I am wondering about the possibility of someone using a working login and password to send spam through my server. So here is my question; That's depressingly common. Look for abandoned or unused accounts like guest/guest. [EMAIL PROTECTED] - that