List Info

Thread: Re: How to tell ipaddress of web mail connection




Re: How to tell ipaddress of web mail connection
country flaguser name
New Zealand
2007-12-12 18:41:44
Hi

As far as surgemail is concerned inbound mail connections
come from webmail 
which is indeed 127.0.0.1 (or whatever it is set to). So the
message 
delivery logs will not be very useful.

However the webmail.log file should show entries along the
following lines 
which are more help:
for attempted login:
5 18:47:27 [3358]  Info: ***: IP=1.2.3.4 NAME=someuser
utoken=(NULL)
for a logged in webmail session:
5 18:47:37 [3381]  Info: ***: IP=1.2.3.4 NAME=(NULL) 
utoken=someusermydomain.com127.0.0.1:143_~2-xxxxxx

Also the messages in question if you are archiving these /
or have access to 
them should have the following header:
X-Originating-IP: 1.2.3.4
which gets added by webmail unless you have explicitly
disabled it.

Marijn



--------------------------------------------------
From: <surgemail-listnetwinsite.com>
Sent: Wednesday, December 12, 2007 9:29 PM
Newsgroups: netwin.surgemail
Subject:  How to tell ipaddress of web mail connection

> Hi.
> We have had problems with a spamer on our web mail
system, How do I track 
> that in the logs ?
> All I see is mail comming from 127.0.0.1, how do I find
the address of 
> http connection ?
>
> thanks
> 


Re: Re: How to tell ipaddress of web mail connection
country flaguser name
United States
2007-12-13 00:42:11
g_spam_user_max : reduce to 300 or so.
g_bad_logins_allow : a really low number
g_relay_window : nada
g_badfrom_noip : checked
g_verify_mx : true
g_from_exact : prevents accounts from sending out using a wrong email address. Make sure that any sub.domains are included as aliases.
Also require SMTP Authentication for your customers.
&nbsp;
BarryZ
1USA
&nbsp;
 
----- Original Message -----
Sent: Wednesday, December 12, 2007 7:41 PM
Subject: [SurgeMail List] Re: How to tell ipaddress of web mail connection

Hi

As far as surgemail is concerned inbound mail connections come from webmail
which is indeed 127.0.0.1 (or whatever it is set to). So the message
delivery logs will not be very useful.

However the webmail.log file should show entries along the following lines
which are more help:
for attempted login:
5 18:47:27 [3358]&nbsp; Info: ***: IP=1.2.3.4 NAME=someuser utoken=(NULL)
for a logged in webmail session:
5 18:47:37 [3381]&nbsp; Info: ***: IP=1.2.3.4 NAME=(NULL)
mydomain.com127.0.0.1:143_~2-xxxxxx">utoken=someusermydomain.com127.0.0.1:143_~2-xxxxxx

Also the messages in question if you are archiving these / or have access to
them should have the following header:
X-Originating-IP: 1.2.3.4
which gets added by webmail unless you have explicitly disabled it.

Marijn



--------------------------------------------------
From: <netwinsite.com">surgemail-listnetwinsite.com>
Sent: Wednesday, December 12, 2007 9:29 PM
Newsgroups: netwin.surgemail
Subject: ; How to tell ipaddress of web mail connection

> Hi.
> We have had problems with a spamer on our web mail system, How do I track
> that in the logs ?
> All I see is mail comming from 127.0.0.1, how do I find the address of
> http connection ?
>
>; thanks
>;

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )