Everyone,
Ok, here's the situation... we have relaying turned off, and still the spammer is still able to access our smtp once we turn the service back on. We are using Merak software as our email... So far we have the firewall turned on for it which is successful in blocking it. Now in the bounce backs, every ip and email addy is spoofed, so how can we track this down? Our server is fully patched, and there are no viruses on the system.
Quick history: We are using our webserver as our company mail server also. When we turn the firewall on, we can receive but not send, and this is hampering our corporate communications. Does anyone have any thoughts or ideas on how to track this, and stop?
Thanks,
Mac
