Re: Post.Office Log Decypher help

Barry Kiesz ( barry@mdex.net )
Sat, 10 May 1997 20:21:19 -0500

>
>> I just got hit with almost 900 error messages in the last 2 days.. all
>> having to do with USA.NET.
>
>You failed to show where these msg's actually came from, all we see here
>are the deliveries. It could be the someone is using your machine as an
>SMTP server, not difficult since most mail servers around the world dont
>object to being used as a mail router.

David and Petar,
Thanks for responding to my message.. I'm using Post.office 2.0 and I
had one of the pieces sent to me off of the "P.O. Error action forms" This
is what I got..

Thanks,

Barry

-------------------------------------

Return-Path: <>
To: michele111@usa.net
From: Mail Administrator<Postmaster@helios.mdex.net>
Reply-To: Mail Administrator<Postmaster@helios.mdex.net>
Subject: Mail System Error - Returned Mail
Date: Sat, 3 May 1997 21:50:50 -0500

This Message was undeliverable due to the following reason:

Your message was not delivered because the return address was refused.

The return address was '<michele111@usa.net>'

Please reply to Postmaster@helios.mdex.net
if you feel this message to be in error.
Received: from helios.mdex.net ([207.90.34.117]) by helios.mdex.net
(post.office MTA v2.0 0813 ID# 306-17891) with SMTP id AEE191
for <ecohn@aol.com> Sat, 3 May 1997 20:41:10 -0500
Received: from mailhost@postservice.com(208.9.77.65) by now300.com
(8.8.5/8.6.5) with SMTP id GAA06958 for <ecohn@aol.com> Sat, 03 May 1997
21:29:07 -0600 (EST)
Date: Sat, 03 May 97 21:29:07 EST
From: michele111@usa.net
To: ecohn@aol.com
Subject: Let Your Child Be the STAR In His/Her Own Personalized Book!!
Message-ID: <199702170025.GAA08056@now.com>
Reply-To: michele1222@mail89.com
X-PMFLAGS: 128 0
Comments: Authenticated sender is <mailstop300@mailroom300.com>

Attachment Converted: "C:\EUDORA\Attach\Mail System Error - Returned Ma"

At 11:11 AM 5/10/97 +0100, you wrote:
>Hi There,
>
>> I just got hit with almost 900 error messages in the last 2 days.. all
>> having to do with USA.NET. Could someone help me decypher my log file?
>> Is my SMTP server getting hijacked?
>
>You failed to show where these msg's actually came from, all we see here
>are the deliveries. It could be the someone is using your machine as an
>SMTP server, not difficult since most mail servers around the world dont
>object to being used as a mail router.
>
>Check where the mail came from, then you might be able to trace it back.
>
>Best I can do for now.
>
> |\
> |/ave Smith -- ThunderNET Systems - admin@quantum.foobar.co.uk
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=
> Quantum -- P/Pro NT4 Server--HTTP://QUANTUM.FOOBAR.CO.UK (>6PM GMT)
>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- +44 589 406567 -=-=-=-=-=-=-=-=-=-=-=
>
>
> ----------------------------------------------------------
> NTISP Mailing List listserver@emerald.iea.com
>
>