Windows Vista Tips
Home Register Members Search Windows Vista Tips File Database Links
Member Login:

Windows Vista Tips > Newsgroups > Windows Server > Windows Small Business Server > Fixed open relay, still relaying spam

Reply
Thread Tools Display Modes

Fixed open relay, still relaying spam

 
 
Devon Cox
Guest
Posts: n/a

 
      04-12-2004
Hi, I have SBS 2003 standard. I followed the instructions in KB 324958 -
plus the following:

in default smtp virtual server settings: set ip address to 192.168.16.2
only. In Authentication, unchecked 'Anonymous access'. In Relay removed
everything except 192.168.16.2 and unchecked 'allow all computers which
authenticat to relay, regardless of list above'.

I'm still relaying spam! What can I do? I enabled detailed logging as
specified in kb 324958, but there are no event ID's 1708 and no events on
MSExchange transport that indicate an user has been hacked...

Any help is appreciated.

thanks,

Devon Cox
 
Reply With Quote
 
 
 
 
Tony Su
Guest
Posts: n/a

 
      04-12-2004
Try this.

<Enable> SMTP Anonymous authentication (otherwise your
Exchange won't be able to talk to other mailservers)
<Remove> all IP addresses from your permitted relay list.
(This disables all anonymous clients from relaying)
<Enable> the checkbox permitting authenticated Users to
relay.

Tony Su



>-----Original Message-----
>Hi, I have SBS 2003 standard. I followed the
instructions in KB 324958 -
>plus the following:
>
>in default smtp virtual server settings: set ip address
to 192.168.16.2
>only. In Authentication, unchecked 'Anonymous access'.
In Relay removed
>everything except 192.168.16.2 and unchecked 'allow all
computers which
>authenticat to relay, regardless of list above'.
>
>I'm still relaying spam! What can I do? I enabled
detailed logging as
>specified in kb 324958, but there are no event ID's 1708
and no events on
>MSExchange transport that indicate an user has been
hacked...
>
>Any help is appreciated.
>
>thanks,
>
>Devon Cox
>
>
>.
>
 
Reply With Quote
 
Peter Gallagher [MSFT]
Guest
Posts: n/a

 
      04-12-2004
Hello Devon,

Is it possible that your server is sending out Non Delivery Reports as a
function of the open relay? It could be possible that someone is hitting
you with a "mail bomb" where they send email to .
Your server will send an NDR to the original sender. To tell if they are
NDR's, look at the "from" column in Exchange->queues. If it is
, then they are likely NDR's.

You can turn off NDR's via Exchange, Global Settings, Internet Message
Formats, Default, Properties, Advanced Tab, uncheck "Allow Non delivery
reports".

Thanks for posting!!

Regards,
Peter Gallagher
Microsoft Product Support
Small Business Server Team


This posting is provided "AS IS" with no warranties, and confers no rights.



"Tony Su" <> wrote in message
news:1b73401c420b8$aaceb000$...
> Try this.
>
> <Enable> SMTP Anonymous authentication (otherwise your
> Exchange won't be able to talk to other mailservers)
> <Remove> all IP addresses from your permitted relay list.
> (This disables all anonymous clients from relaying)
> <Enable> the checkbox permitting authenticated Users to
> relay.
>
> Tony Su
>
>
>
> >-----Original Message-----
> >Hi, I have SBS 2003 standard. I followed the
> instructions in KB 324958 -
> >plus the following:
> >
> >in default smtp virtual server settings: set ip address
> to 192.168.16.2
> >only. In Authentication, unchecked 'Anonymous access'.
> In Relay removed
> >everything except 192.168.16.2 and unchecked 'allow all
> computers which
> >authenticat to relay, regardless of list above'.
> >
> >I'm still relaying spam! What can I do? I enabled
> detailed logging as
> >specified in kb 324958, but there are no event ID's 1708
> and no events on
> >MSExchange transport that indicate an user has been
> hacked...
> >
> >Any help is appreciated.
> >
> >thanks,
> >
> >Devon Cox
> >
> >
> >.
> >
 
Reply With Quote
 
Devon Cox
Guest
Posts: n/a

 
      04-12-2004
Hi, thanks for responding. I tried that and I'm still relaying spam. I've
been trying to shake this spammer for days. What else would you suggest?

thanks,

Devon Cox

"Tony Su" <> wrote in message
news:1b73401c420b8$aaceb000$...
> Try this.
>
> <Enable> SMTP Anonymous authentication (otherwise your
> Exchange won't be able to talk to other mailservers)
> <Remove> all IP addresses from your permitted relay list.
> (This disables all anonymous clients from relaying)
> <Enable> the checkbox permitting authenticated Users to
> relay.
>
> Tony Su
>
>
>
> >-----Original Message-----
> >Hi, I have SBS 2003 standard. I followed the
> instructions in KB 324958 -
> >plus the following:
> >
> >in default smtp virtual server settings: set ip address
> to 192.168.16.2
> >only. In Authentication, unchecked 'Anonymous access'.
> In Relay removed
> >everything except 192.168.16.2 and unchecked 'allow all
> computers which
> >authenticat to relay, regardless of list above'.
> >
> >I'm still relaying spam! What can I do? I enabled
> detailed logging as
> >specified in kb 324958, but there are no event ID's 1708
> and no events on
> >MSExchange transport that indicate an user has been
> hacked...
> >
> >Any help is appreciated.
> >
> >thanks,
> >
> >Devon Cox
> >
> >
> >.
> >
 
Reply With Quote
 
Peter Gallagher [MSFT]
Guest
Posts: n/a

 
      04-13-2004
Turn on SMTP protocol logging at the properties of the SMTP Virtual Server,
set the format to Microsoft IIS Logfile Format. The log is located
c:\windows\system32\logfiles\smtpsvc1. This will log in and out port 25
traffic.

Also, are you running standard or premium? Are you "server publishing" SMTP
with ISA?

Attach a copy of one of the smtp logs to your post.

Thanks for posting!!

Regards,
Peter Gallagher
Microsoft Product Support
Small Business Server Team


This posting is provided "AS IS" with no warranties, and confers no rights.




"Devon Cox" <> wrote in message
news:U4ydnSHyx8hKv-bdRVn-...
> Hi, thanks for responding. I tried that and I'm still relaying spam.
I've
> been trying to shake this spammer for days. What else would you suggest?
>
> thanks,
>
> Devon Cox
>
> "Tony Su" <> wrote in message
> news:1b73401c420b8$aaceb000$...
> > Try this.
> >
> > <Enable> SMTP Anonymous authentication (otherwise your
> > Exchange won't be able to talk to other mailservers)
> > <Remove> all IP addresses from your permitted relay list.
> > (This disables all anonymous clients from relaying)
> > <Enable> the checkbox permitting authenticated Users to
> > relay.
> >
> > Tony Su
> >
> >
> >
> > >-----Original Message-----
> > >Hi, I have SBS 2003 standard. I followed the
> > instructions in KB 324958 -
> > >plus the following:
> > >
> > >in default smtp virtual server settings: set ip address
> > to 192.168.16.2
> > >only. In Authentication, unchecked 'Anonymous access'.
> > In Relay removed
> > >everything except 192.168.16.2 and unchecked 'allow all
> > computers which
> > >authenticat to relay, regardless of list above'.
> > >
> > >I'm still relaying spam! What can I do? I enabled
> > detailed logging as
> > >specified in kb 324958, but there are no event ID's 1708
> > and no events on
> > >MSExchange transport that indicate an user has been
> > hacked...
> > >
> > >Any help is appreciated.
> > >
> > >thanks,
> > >
> > >Devon Cox
> > >
> > >
> > >.
> > >
>
>
 
Reply With Quote
 
Devon Cox
Guest
Posts: n/a

 
      04-14-2004
Hi, I'm using sbs 2003 standard. below is a copy of a log. is
an authorized user, but he's only sending email from the lan. If the log
shows him relay externally, then I guess his account is hacked. (the email
addy's have been changed to protect the presumed innocent).

Thanks very much,

Devon Cox

207.217.125.16, OutboundConnectionResponse, 4/14/2004, 11:47:04, SMTPSVC1,
SERVER01, -, 10000, 0, 101, 0, 0, -, -, 220 eagle EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 08:46:19 -0700 (PDT),
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 11:47:04, SMTPSVC1,
SERVER01, -, 10140, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 11:47:04, SMTPSVC1,
SERVER01, -, 10718, 0, 65, 0, 0, -, -, 250-eagle Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 11:47:04, SMTPSVC1,
SERVER01, -, 10718, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com>
SIZE=5956434,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 11:47:06, SMTPSVC1,
SERVER01, -, 11265, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 11:47:06, SMTPSVC1,
SERVER01, -, 11265, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 11:47:06, SMTPSVC1,
SERVER01, -, 11906, 0, 44, 0, 0, -, -, 250 <>...
Recipient ok,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 11:47:06, SMTPSVC1,
SERVER01, -, 11906, 0, 4, 0, 0, DATA, -, -,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 11:47:07, SMTPSVC1,
SERVER01, -, 12406, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a
line by itself,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 11:52:19, SMTPSVC1,
SERVER01, -, 11156, 0, 103, 0, 0, -, -, 220 skylark EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 08:51:34 -0700 (PDT),
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 11:52:19, SMTPSVC1,
SERVER01, -, 11156, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 11:52:19, SMTPSVC1,
SERVER01, -, 11625, 0, 67, 0, 0, -, -, 250-skylark Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 11:52:19, SMTPSVC1,
SERVER01, -, 11625, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com>
SIZE=5956434,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 11:52:20, SMTPSVC1,
SERVER01, -, 12203, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 11:52:20, SMTPSVC1,
SERVER01, -, 12203, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 11:52:20, SMTPSVC1,
SERVER01, -, 12750, 0, 44, 0, 0, -, -, 250 <>...
Recipient ok,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 11:52:20, SMTPSVC1,
SERVER01, -, 12750, 0, 4, 0, 0, DATA, -, -,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 11:52:21, SMTPSVC1,
SERVER01, -, 13219, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a
line by itself,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 11:57:24, SMTPSVC1,
SERVER01, -, 172, 0, 104, 0, 0, -, -, 220 killdeer EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 08:56:39 -0700 (PDT),
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 11:57:24, SMTPSVC1,
SERVER01, -, 172, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 11:57:24, SMTPSVC1,
SERVER01, -, 734, 0, 68, 0, 0, -, -, 250-killdeer Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 11:57:24, SMTPSVC1,
SERVER01, -, 734, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 11:57:25, SMTPSVC1,
SERVER01, -, 1469, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 11:57:25, SMTPSVC1,
SERVER01, -, 1469, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 11:57:25, SMTPSVC1,
SERVER01, -, 2125, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 11:57:25, SMTPSVC1,
SERVER01, -, 2125, 0, 4, 0, 0, DATA, -, -,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 11:57:26, SMTPSVC1,
SERVER01, -, 2875, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 78, 0, 103, 0, 0, -, -, 220 bunting EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:01:43 -0700 (PDT),
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 125, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 218, 0, 67, 0, 0, -, -, 250-bunting Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 250, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 343, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 343, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 468, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 468, 0, 4, 0, 0, DATA, -, -,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 12:02:28, SMTPSVC1,
SERVER01, -, 547, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3172, 0, 103, 0, 0, -, -, 220 vulture EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:06:48 -0700 (PDT),
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3172, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3266, 0, 67, 0, 0, -, -, 250-vulture Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3266, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3360, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3360, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3500, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3500, 0, 4, 0, 0, DATA, -, -,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:07:33, SMTPSVC1,
SERVER01, -, 3594, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 8829, 0, 103, 0, 0, -, -, 220 penguin EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:11:59 -0700 (PDT),
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 8829, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 8922, 0, 67, 0, 0, -, -, 250-penguin Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 8922, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 9016, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 9016, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 9157, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 9157, 0, 4, 0, 0, DATA, -, -,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:12:44, SMTPSVC1,
SERVER01, -, 9250, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 78, 0, 100, 0, 0, -, -, 220 mamo EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:17:00 -0700 (PDT),
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 188, 0, 64, 0, 0, -, -, 250-mamo Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 391, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 391, 0, 4, 0, 0, DATA, -, -,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 12:17:45, SMTPSVC1,
SERVER01, -, 484, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 94, 0, 101, 0, 0, -, -, 220 robin EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:22:02 -0700 (PDT),
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 188, 0, 65, 0, 0, -, -, 250-robin Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 422, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 422, 0, 4, 0, 0, DATA, -, -,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 12:22:47, SMTPSVC1,
SERVER01, -, 516, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 93, 0, 103, 0, 0, -, -, 220 tanager EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:27:03 -0700 (PDT),
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 93, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 187, 0, 67, 0, 0, -, -, 250-tanager Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 187, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 390, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 390, 0, 4, 0, 0, DATA, -, -,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 12:27:48, SMTPSVC1,
SERVER01, -, 468, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 78, 0, 104, 0, 0, -, -, 220 cockatoo EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:32:05 -0700 (PDT),
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 78, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 187, 0, 68, 0, 0, -, -, 250-cockatoo Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 187, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 422, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 422, 0, 4, 0, 0, DATA, -, -,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 12:32:50, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
66.238.88.68, OutboundConnectionResponse, 4/14/2004, 12:34:52, SMTPSVC1,
SERVER01, -, 10063, 0, 32, 0, 0, -, -, 220 mail.blaze.com ESMTP Postfix,
66.238.88.68, OutboundConnectionCommand, 4/14/2004, 12:34:52, SMTPSVC1,
SERVER01, -, 10063, 0, 4, 0, 0, EHLO, -, shannons.com,
66.238.88.68, OutboundConnectionResponse, 4/14/2004, 12:34:54, SMTPSVC1,
SERVER01, -, 11594, 0, 18, 0, 0, -, -, 250-mail.blaze.com,
66.238.88.68, OutboundConnectionCommand, 4/14/2004, 12:34:54, SMTPSVC1,
SERVER01, -, 11594, 0, 4, 0, 0, MAIL, -, FROM:<> SIZE=7523,
66.238.88.68, OutboundConnectionResponse, 4/14/2004, 12:34:56, SMTPSVC1,
SERVER01, -, 14000, 0, 6, 0, 0, -, -, 250 Ok,
66.238.88.68, OutboundConnectionCommand, 4/14/2004, 12:34:56, SMTPSVC1,
SERVER01, -, 14000, 0, 4, 0, 0, RCPT, -, TO:<>,
66.238.88.68, OutboundConnectionResponse, 4/14/2004, 12:34:59, SMTPSVC1,
SERVER01, -, 16438, 0, 67, 0, 0, -, -, 450 <>: User
unknown in local recipient table,
66.238.88.68, OutboundConnectionCommand, 4/14/2004, 12:34:59, SMTPSVC1,
SERVER01, -, 16438, 0, 4, 0, 0, RSET, -, -,
66.238.88.68, OutboundConnectionResponse, 4/14/2004, 12:35:00, SMTPSVC1,
SERVER01, -, 17938, 0, 6, 0, 0, -, -, 250 Ok,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 93, 0, 103, 0, 0, -, -, 220 sparrow EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:37:07 -0700 (PDT),
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 93, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 187, 0, 67, 0, 0, -, -, 250-sparrow Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 187, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 406, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 422, 0, 4, 0, 0, DATA, -, -,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 12:37:52, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.21, OutboundConnectionResponse, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 94, 0, 102, 0, 0, -, -, 220 merlin EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:42:08 -0700 (PDT),
207.217.125.21, OutboundConnectionCommand, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.21, OutboundConnectionResponse, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 188, 0, 66, 0, 0, -, -, 250-merlin Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.21, OutboundConnectionCommand, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.21, OutboundConnectionResponse, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 282, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.21, OutboundConnectionCommand, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 282, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.21, OutboundConnectionResponse, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 407, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.21, OutboundConnectionCommand, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 407, 0, 4, 0, 0, DATA, -, -,
207.217.125.21, OutboundConnectionResponse, 4/14/2004, 12:42:53, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.18, OutboundConnectionResponse, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 94, 0, 100, 0, 0, -, -, 220 kite EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:47:10 -0700 (PDT),
207.217.125.18, OutboundConnectionCommand, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.18, OutboundConnectionResponse, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 188, 0, 64, 0, 0, -, -, 250-kite Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.18, OutboundConnectionCommand, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.18, OutboundConnectionResponse, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.18, OutboundConnectionCommand, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.18, OutboundConnectionResponse, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 406, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.18, OutboundConnectionCommand, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 406, 0, 4, 0, 0, DATA, -, -,
207.217.125.18, OutboundConnectionResponse, 4/14/2004, 12:47:55, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 3953, 0, 103, 0, 0, -, -, 220 vulture EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:53:11 -0700 (PDT),
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 3953, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4047, 0, 67, 0, 0, -, -, 250-vulture Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4297, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4391, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4391, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4516, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.25, OutboundConnectionCommand, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4516, 0, 4, 0, 0, DATA, -, -,
207.217.125.25, OutboundConnectionResponse, 4/14/2004, 12:53:59, SMTPSVC1,
SERVER01, -, 4610, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9719, 0, 103, 0, 0, -, -, 220 penguin EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 09:58:27 -0700 (PDT),
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9719, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9813, 0, 67, 0, 0, -, -, 250-penguin Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9813, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9906, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 9906, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 10031, 0, 44, 0, 0, -, -, 250 <>...
Recipient ok,
207.217.125.17, OutboundConnectionCommand, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 10031, 0, 4, 0, 0, DATA, -, -,
207.217.125.17, OutboundConnectionResponse, 4/14/2004, 12:59:12, SMTPSVC1,
SERVER01, -, 10125, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a
line by itself,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 8843, 0, 101, 0, 0, -, -, 220 eagle EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:03:38 -0700 (PDT),
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 8843, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 8937, 0, 65, 0, 0, -, -, 250-eagle Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 8937, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 9031, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 9031, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 9203, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.16, OutboundConnectionCommand, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 9203, 0, 4, 0, 0, DATA, -, -,
207.217.125.16, OutboundConnectionResponse, 4/14/2004, 13:04:23, SMTPSVC1,
SERVER01, -, 9296, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 94, 0, 101, 0, 0, -, -, 220 robin EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:08:39 -0700 (PDT),
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 188, 0, 65, 0, 0, -, -, 250-robin Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 282, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 282, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 407, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.20, OutboundConnectionCommand, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 407, 0, 4, 0, 0, DATA, -, -,
207.217.125.20, OutboundConnectionResponse, 4/14/2004, 13:09:24, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 13:14:26, SMTPSVC1,
SERVER01, -, 438, 0, 104, 0, 0, -, -, 220 killdeer EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:13:41 -0700 (PDT),
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 13:14:26, SMTPSVC1,
SERVER01, -, 438, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 13:14:26, SMTPSVC1,
SERVER01, -, 985, 0, 68, 0, 0, -, -, 250-killdeer Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 13:14:26, SMTPSVC1,
SERVER01, -, 985, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 13:14:27, SMTPSVC1,
SERVER01, -, 1563, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 13:14:27, SMTPSVC1,
SERVER01, -, 1563, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 13:14:27, SMTPSVC1,
SERVER01, -, 2047, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.19, OutboundConnectionCommand, 4/14/2004, 13:14:27, SMTPSVC1,
SERVER01, -, 2047, 0, 4, 0, 0, DATA, -, -,
207.217.125.19, OutboundConnectionResponse, 4/14/2004, 13:14:28, SMTPSVC1,
SERVER01, -, 2563, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 609, 0, 104, 0, 0, -, -, 220 cockatoo EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:18:45 -0700 (PDT),
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 609, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 1078, 0, 68, 0, 0, -, -, 250-cockatoo Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 1078, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 1484, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 13:19:30, SMTPSVC1,
SERVER01, -, 1484, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 13:19:31, SMTPSVC1,
SERVER01, -, 2031, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.24, OutboundConnectionCommand, 4/14/2004, 13:19:31, SMTPSVC1,
SERVER01, -, 2031, 0, 4, 0, 0, DATA, -, -,
207.217.125.24, OutboundConnectionResponse, 4/14/2004, 13:19:31, SMTPSVC1,
SERVER01, -, 2546, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 94, 0, 103, 0, 0, -, -, 220 skylark EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:23:48 -0700 (PDT),
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 188, 0, 67, 0, 0, -, -, 250-skylark Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 282, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 282, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 407, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.27, OutboundConnectionCommand, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 407, 0, 4, 0, 0, DATA, -, -,
207.217.125.27, OutboundConnectionResponse, 4/14/2004, 13:24:33, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 94, 0, 103, 0, 0, -, -, 220 sparrow EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:28:51 -0700 (PDT),
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 188, 0, 67, 0, 0, -, -, 250-sparrow Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 282, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 282, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 407, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.26, OutboundConnectionCommand, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 407, 0, 4, 0, 0, DATA, -, -,
207.217.125.26, OutboundConnectionResponse, 4/14/2004, 13:29:36, SMTPSVC1,
SERVER01, -, 485, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.22, OutboundConnectionResponse, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 94, 0, 102, 0, 0, -, -, 220 condor EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:33:53 -0700 (PDT),
207.217.125.22, OutboundConnectionCommand, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.22, OutboundConnectionResponse, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 203, 0, 66, 0, 0, -, -, 250-condor Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.22, OutboundConnectionCommand, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 203, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.22, OutboundConnectionResponse, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 297, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.22, OutboundConnectionCommand, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 297, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.22, OutboundConnectionResponse, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 406, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.22, OutboundConnectionCommand, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 406, 0, 4, 0, 0, DATA, -, -,
207.217.125.22, OutboundConnectionResponse, 4/14/2004, 13:34:38, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 94, 0, 103, 0, 0, -, -, 220 tanager EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:38:56 -0700 (PDT),
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 188, 0, 67, 0, 0, -, -, 250-tanager Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 188, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 282, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 282, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 407, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.29, OutboundConnectionCommand, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 407, 0, 4, 0, 0, DATA, -, -,
207.217.125.29, OutboundConnectionResponse, 4/14/2004, 13:39:41, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 500, 0, 103, 0, 0, -, -, 220 bunting EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:43:59 -0700 (PDT),
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 500, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 968, 0, 67, 0, 0, -, -, 250-bunting Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 968, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 1156, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 1156, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 1281, 0, 44, 0, 0, -, -, 250 <>... Recipient
ok,
207.217.125.28, OutboundConnectionCommand, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 1281, 0, 4, 0, 0, DATA, -, -,
207.217.125.28, OutboundConnectionResponse, 4/14/2004, 13:44:44, SMTPSVC1,
SERVER01, -, 1359, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 94, 0, 100, 0, 0, -, -, 220 mamo EL_3_9_13_6 /EL_3_9_13_6
ESMTP EarthLink SMTP Server Wed, 14 Apr 2004 10:49:02 -0700 (PDT),
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 94, 0, 4, 0, 0, EHLO, -, shannons.com,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 187, 0, 64, 0, 0, -, -, 250-mamo Hello shannons.com
[64.252.159.73], pleased to meet you,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 187, 0, 4, 0, 0, MAIL, -, FROM:<user@shann..com> SIZE=5956434,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 281, 0, 49, 0, 0, -, -, 250 <user@shann..com> SIZE=5956434...
Sender ok,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 281, 0, 4, 0, 0, RCPT, -, TO:<>,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 406, 0, 44, 0, 0, -, -, 250 <>...
Recipient ok,
207.217.125.23, OutboundConnectionCommand, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 406, 0, 4, 0, 0, DATA, -, -,
207.217.125.23, OutboundConnectionResponse, 4/14/2004, 13:49:47, SMTPSVC1,
SERVER01, -, 500, 0, 48, 0, 0, -, -, 354 Enter mail, end with "." on a line
by itself,
 
Reply With Quote
 
Peter Gallagher [MSFT]
Guest
Posts: n/a

 
      04-14-2004


Hello Devon,

Based on the logs, those are outbound connections which are normal
(internal connections, if you will).

It does not appear that the server is allowing relay. Based on the logs,
it does not appear to be a hacked account.

I need to know specifically why you think you are being used (abused) as an
open relay.

Thanks for posting!!

Regards,
Peter Gallagher
Microsoft Product Support
Small Business Server Team


This posting is provided "AS IS" with no warranties, and confers no rights.
 
Reply With Quote
 
 
 
Reply

« 2003 server help | Re: SBS 2003 fax server and SharePoint problems... »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Lost log in cookies Mike Internet Explorer 53 07-29-2009 08:53 PM
Re: Un able to open attachment in windows mail PA Bear [MS MVP] Windows Vista Mail 24 07-29-2009 03:50 AM
Un able to open attachment in windows mail Noor Motani Internet Explorer 29 07-29-2009 03:50 AM
Strange persistant blocking of open ports JBT Windows 64 Bit 7 09-06-2007 12:36 AM
Backup Failing Larry Lentz Windows Small Business Server 7 03-05-2004 06:54 PM


Forum Software Powered by vBulletin®, Copyright Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc.
Contact Us - Windows Vista Tips - Archive - Privacy Statement - Top

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59