Another SMTP question, Can you tell whose connected to your SMTP server

HCL Domino Domino Forum
1

I’m hoping someone can help me out here. I was wondering if it is possible to tell who is connecting to our SMTP server. Watching the server console I see these messages:

11/09/2009 08:34:06.33 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 22E30140

11/09/2009 08:34:06.80 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 23690185

11/09/2009 08:34:07.22 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 2CDC00BC

11/09/2009 08:34:07.61 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 295C002F

11/09/2009 08:34:08.05 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 2E5300E6

11/09/2009 08:34:08.47 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 252901B2

11/09/2009 08:34:08.50 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 24B90115

11/09/2009 08:34:08.91 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 258201A6

11/09/2009 08:34:09.35 AM [1DEC:0006-1524] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 29FD019B

We are being black listed for sending Spam/Viruses and we can’t determine where it is coming from. We are changing our allowed Internet Hosts to Static IP addresses. Currently we are using some IP masks, but all of the computers are in a different subnet than the ones I have listed in the Allowed internet hosts. Only servers are in the Allowed internet hosts to connect.

I can’t find a program or anything that would help with this.

Thanks

2

Subject: Look at your outbound controls

If you are being blacklisted then it’s likely your SMTP server is acting as an open relay so you need to set your SMTP outbound controls so that only Notes users can send messages on.

In your log for your server (log.nsf) you should be able to see the IPs of your SMTP server connections, i.e. for us for today:

11/09/2009 11:01:28 AM SMTP Server: adsl.viettel.vn (115.76.186.66) connected

11/09/2009 11:01:29 AM SMTP Server: adsl.viettel.vn (115.76.186.66) disconnected. 0 message[s] received

The 0 message recieved bit is because we have set our inbound controls to only accept from Frontbridge’s servers as we use them for spam and virus filtering.

Hope this helps.

Adam.