I just upgraded from SIMS 1.8b7 to 1.8b9d14, and have started using RBLs and also have a couple dozen of my own IP ranges listed in my own blacklist. The last few hours, I've started noticing the following entries in my logs. wacondatrader.com is one of my domains on my work SIMS machine. classicnet.net is a regional cable company being an ISP, and kans.com is also a domain I recognize from the region.
24.225.31.83 is a static public IP that my ISP in Hays, KS gave me to assign to an Apple Airport Extreme Basestation, that is providing routing functions for a couple of iMacs with Airport, plus our Hays manager's Wintel machine. I'm fairly certain that "oemcomputer" in this log is referring to his machine. Could he possibly have a PC worm or virus? It is looking like since about 3:00 p.m. this afternoon, these entries have been showing up approximately every 20 minutes.
I'd bet that he has a worm, but to get useful information you will need to turn up the SMTP logging level.
--
Bill Cole [EMAIL PROTECTED]
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
