Re: message logging
Ivo Smits <[email protected]> Tue, 21 May 2013 17:45:04 +0200
| Newsgroups | gmane.mail.xmail.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============0943013943== Content-Type: multipart/alternative; boundary="------------020200010500050007070201" This is a multi-part message in MIME format. --------------020200010500050007070201 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hello, It is also possible that someone is sending spam messages directly, not via your mailserver. If you have a spam message, you can usually find out if this is the case by viewing the e-mail headers (often visible in the "raw email source"). Is your mail server listed in the headers (in a Received: line)? You could try to look into the XMail SMTP logs. Their location depends on the OS. If the spam mails are listed in these logs, something else is sending the emails to your XMail server and your XMail server is forwarding these spam messages. In this case you can find the IP address and possibly username of the sender. Possibly some account information for your mailserver has leaked, or the server may be configured as an open relay. You can also use a tool like wireshark or tcpdump to monitor communications on tcp port 25, which would also tell you if your server is sending spam mails (if it is sending at that moment). I hope this helps. Ivo Op 21-5-2013 16:26, Spyros Tsiolis schreef: > Hello all, > > I have a situation with an installation where someone has managed > to get hold of an e-mail address (the boss' actually) and is sending > spam to the outside world. > > To an extend, I've managed to isolate the problem and it seems > it's the mail server itself. > I still don't know if it's XMail or an anti-spam solution I've adopted > since about 2004. > > I would like to monitor the mail that goes out to the world. > Can I do this with XMail ? Do I check the logs ? Which logs ? > I've never done this before, so I would be greatful to any help. > > thank you, > > spyros > > > > > > > > > ---- > "I merely function as a channel that filters > music through the chaos of noise" > - Vangelis > > > _______________________________________________ > xmail mailing list > [email protected] > http://xmailserver.org/mailman/listinfo/xmail --------------020200010500050007070201 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hello,<br> <br> It is also possible that someone is sending spam messages directly, not via your mailserver. If you have a spam message, you can usually find out if this is the case by viewing the e-mail headers (often visible in the "raw email source"). Is your mail server listed in the headers (in a Received: line)?<br> <br> You could try to look into the XMail SMTP logs. Their location depends on the OS. If the spam mails are listed in these logs, something else is sending the emails to your XMail server and your XMail server is forwarding these spam messages. In this case you can find the IP address and possibly username of the sender. Possibly some account information for your mailserver has leaked, or the server may be configured as an open relay.<br> <br> You can also use a tool like wireshark or tcpdump to monitor communications on tcp port 25, which would also tell you if your server is sending spam mails (if it is sending at that moment).<br> <br> I hope this helps.<br> <br> Ivo<br> <br> <div class="moz-cite-prefix">Op 21-5-2013 16:26, Spyros Tsiolis schreef:<br> </div> <blockquote cite="mid:[email protected]" type="cite"> <div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">Hello all,<br> <br> I have a situation with an installation where someone has managed<br> to get hold of an e-mail address (the boss' actually) and is sending<br> spam to the outside world.<br> <br> To an extend, I've managed to isolate the problem and it seems<br> it's the mail server itself.<br> I still don't know if it's XMail or an anti-spam solution I've adopted<br> since about 2004.<br> <br> I would like to monitor the mail that goes out to the world.<br> Can I do this with XMail ? Do I check the logs ? Which logs ?<br> I've never done this before, so I would be greatful to any help.<br> <br> thank you,<br> <br> spyros<br> <br> <br> <br> <br> <br> <br> <br> <div><span><br> </span></div> <div> </div> <div>----<br> "I merely function as a channel that filters <br> music through the chaos of noise"<br> - Vangelis</div> </div> <br> <fieldset class="mimeAttachmentHeader"></fieldset> <br> <pre wrap="">_______________________________________________ xmail mailing list <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-freetext" href="http://xmailserver.org/mailman/listinfo/xmail">http://xmailserver.org/mailman/listinfo/xmail</a> </pre> </blockquote> <br> </body> </html> --------------020200010500050007070201-- --===============0943013943== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ xmail mailing list [email protected] http://xmailserver.org/mailman/listinfo/xmail --===============0943013943==--