Hard Drive constantly writing when SMTP is enabled 3

[webmastadj84]

I have this problem. The server is runng 2003 exchange and every time I turn on the SMTP server service, the system is constantly writing to the hard drive...so much so it slows the system down a great deal. Once I stop the service, the system stops writting to the hard drive and then goes back to normal opperation. Any ideas with this problem? It has been working fine until this happened a few weeks ago.

 

[webmastadj84]

Ok, now I have a problem. I disabled the relay, but now it won't let me send mail out.
Example:
FROM: me@mydomain.com
TO: me@aol.com

the error I get when using the telnet is: uable to relay for me@aol.com

This means I can't send email to other domains on the internet from my mail account on the server?

 

[webmastadj84]

also reviewed the logs.....there was someone try to relay, it did deny them.

 

[webmastadj84]

ok, I believe I figured out exactly what needs to be done.

Need a way to block an email address except for the current email addresses on the server from sending mail to other people. Right now, it is doing the reverse.

For example (this is how it should work):

-----------------------------
EMAIL FROM: me@mydomain.com
EMAIL TO: friend@aol.com
MESSAGE: this is a test.
-----------------------------
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>This email should be allowed


-----------------------------
EMAIL FROM: friend@aol.com
EMAIL TO: me@mydomain.com
MESSAGE: this is a test
-----------------------------
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>This email should be allowed


-----------------------------
EMAIL FROM: janedoe@none.com
EMAIL TO: johndoe@overhere.com
MESSAGE: this is a test
-----------------------------
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>This email should be denied!!!


In other words, it should check the senders address on OUT email and confirm that it does exisist on the server. But it should let all email the is addressed to an internal user IN.

Any ideas?

 

[ShackDaddy]

CHeck out that Daniel Petri article again and make sure your settings match what he describes.

 

[webmastadj84]

All of that is right...it matches perfectly but this happens and this is a problem:

"You must understand what will happen if you choose to clear the "Anonymous access" check box in the Authentication window of the SMTP Virtual Server. Although this will indeed successfully stop your server from being a relay, on the other hand it will cause your server to stop receiving incoming mail from the Internet. This is because all the servers (it doesn't matter if they are E2K, Send Mail or any other mail servers) that will ever need to open an SMTP connection to your server will be required to authenticate, and it will be impossible for them to do so because they are not configured to use a specific username and password. You can't expect every mail server that will need to "talk" to your server to to "know" what username and passwords you've got configured in your domain, so basically no one will ever be able to send mail to your domain.

 

[webmastadj84]

that is what happens....if I uncheck the anonymous access then it stop relay which totaly block all incoming messages to my server making my user unable to recieve mail.

 

[kbing]

you WANT to enable "anonymous access" PLUS have Authenticated Users has Submit permission enabled!

See my previous post. That is the correct configuration. Don't worry about your badmail folder at this point when you enable SMTP have have this configured.

Once this is configured...if you want to see if people are spamming you or attacking you...then go into the SMTP protocol via System manager and opent the "current sessions" on SMTP...that will show if any connections are alive. If you see connections that are continously on your system...you can block their IP's. That's not ideal...but it gets you started.

If your worried about being hacked...then take the external network connection offline...then get everything started and correctly configured (see my previous post) and let Exchange work thru the messages that it needs to until it stops. Monitor what the system is doing and take action as necessary.

 

[webmastadj84]

That is the same thing I was doing before. There isn't an easier way to do this. No way I can check the senders and TO address against the Exchange users and only allow the email if at least one of them matches?

 

[webmastadj84]

I do have two servers, so is there any way that I can use one server for outbound emails and one for inbound emails. In other words....Use the main server for inbound emails but don't allow it to send emails out. Then allow the other to send email out but not allow inbound emails?

 

[webmastadj84]

I have also seen when some ISPs make you log-in before you can send email through their SMTP servers but their users are still able to recieve email, how is this done? There has be some way to achive this.

 

[Marcs41]

You already addressed this entire issue in your other thread955-1270451.
It looks to me that you need to take a serious and detailed look at your setup and configuration as this is going nowhere like this.
Stick to one issue at the time and take it from there, you are doing too many things at the same time and everything gets confused, for you and for us.
What you should do now is to take a few steps back, go over everything again and stop thinking or guessing what you should do.
Go through the setup as if it were the first time and go step by step. Don't assume, never suppose, just read and follow the guides, you may be surprised what little detail you missed along the way.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all.
Free Tip: The F1 Key does NOT destroy your PC!}

 

[kbing]

PicouEnterprises: You stated "No way I can check the senders and TO address against the Exchange users and only allow the email if at least one of them matches?".

When you configure exchange as we posted, both in the article and my outline, your system does not require remote mail systems to "authenticate". That is why "anonymous" is selected.

When you have "anonymous" selected AND have "Authenticated Users has Submit permission" selected, then what will happen is:

a) mail systems on the internet will use the anonymous capability to send mail to your system on port 25. This is what allows incoming mail to be delivered to your system.

b) users on the outside that try to "relay" off your mail system will be required to authenticate. If they cannot then they can't relay. This is how Exchange 2003 prevents relay.

All users on your internal network should be using Active Directory logon accounts which "authenticate" and allow them to send / receive mail.


I agree with Marc. You need to slow down and focus on 1 thing...then once that is resolved...move onto the next issue. Sounds like you don't understand Exchange and need to engage someone who has more experience.

If the above doesn't work...then it will be extremely difficult to help you because at this point I would need access to your system to perform an audit and do some testing.

What's your external IP and domain name for this system? I can do some telnet tests from the outside for you. I would also need your valid email address. If you don't want to post it here...email it to me.

 

[webmastadj84]

I didn't think this and the other were related until I got into it. I have done everything that you said, triple checked it and everything is set. But in my exchange logs I am still seeing email being sent. The IP address for the server is 207.30.146.150....if you could check and make sure the relay is turned off, that would be great. I did create and account on the server for the email. johndoe is the username and janedoe is the password.

Here is a copy of the SMTP to show the activity (just part of the log file, the whole file goes on just like that; every second or few seconds another email):


#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2006-11-10 21:22:05
#Fields: date time c-ip cs-username s-sitename s-computername s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes cs-bytes time-taken cs-version cs-host cs(User-Agent) cs(Cookie) cs(Referer)
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mta104.mail.tp2.yahoo.com+ESMTP+YSmtp+service+ready 0 0 55 0 188 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 188 SMTP - - - -
2006-11-10 21:22:05 211.43.197.182 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 554+5.7.1+207.30.146.150:+Connection+refused.+Your+IP+
address+is+blocked(anti-spam). 0 0 84 0 188 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mta104.mail.tp2.yahoo.com 0 0 29 0 422 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<ghdcydqpssavjq@ms65.hinet.net>+SIZE=3920 0 0 4 0 422 SMTP - - - -
2006-11-10 21:22:05 211.43.197.174 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 554+5.7.1+207.30.146.150:+Connection+refused.+Your+IP+address+
is+blocked(anti-spam). 0 0 84 0 172 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+sender+<ghdcydqpssavjq@ms65.hinet.net>+ok 0 0 45 0 657 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<honchi0815@yahoo.com.tw> 0 0 4 0 657 SMTP - - - -
2006-11-10 21:22:05 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gkevens0915@yahoo.com.tw> 0 0 4 0 657 SMTP - - - -
2006-11-10 21:22:07 211.43.197.96 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 554+5.7.1+207.30.146.150:+Connection+refused.+Your+IP+address+
is+blocked(anti-spam). 0 0 84 0 219 SMTP - - - -
2006-11-10 21:22:07 211.43.197.20 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 554+5.7.1+207.30.146.150:+Connection+refused.+Your+IP+
address+is+blocked(anti-spam). 0 0 84 0 219 SMTP - - - -
2006-11-10 21:22:07 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+recipient+<honchi0815@yahoo.com.tw>+ok 0 0 42 0 891 SMTP - - - -
2006-11-10 21:22:07 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+recipient+<gkevens0915@yahoo.com.tw>+ok 0 0 43 0 891 SMTP - - - -
2006-11-10 21:22:07 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 891 SMTP - - - -
2006-11-10 21:22:07 211.43.197.106 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 554+5.7.1+207.30.146.150:+Connection+refused.+Your+IP+address+
is+blocked(anti-spam). 0 0 84 0 218 SMTP - - - -
2006-11-10 21:22:07 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+go+ahead 0 0 12 0 1125 SMTP - - - -
2006-11-10 21:22:07 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 451+Message+temporarily+deferred+-+[90] 0 0 39 0 1407 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 453+Mail+from+207.30.146.150+not+allowed+-+[90] 0 0 47 0 234 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 234 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mta105.mail.tp2.yahoo.com+ESMTP+YSmtp+service+ready 0 0 55 0 234 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 234 SMTP - - - -
2006-11-10 21:22:08 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx168.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:20:35++0800+(CST) 0 0 85 0 2296 SMTP - - - -
2006-11-10 21:22:08 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 2296 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mta105.mail.tp2.yahoo.com 0 0 29 0 469 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 469 SMTP - - - -
2006-11-10 21:22:08 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx168.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 2515 SMTP - - - -
2006-11-10 21:22:08 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=3435 0 0 4 0 2515 SMTP - - - -
2006-11-10 21:22:08 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mta105.mail.tp2.yahoo.com 0 0 29 0 687 SMTP - - - -
2006-11-10 21:22:09 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 2812 SMTP - - - -
2006-11-10 21:22:09 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<jiqir.bnzjp@msa.hinet.net> 0 0 4 0 2812 SMTP - - - -
2006-11-10 21:22:09 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<jiqir.bnzjp@msa.hinet.net>...+Recipient+ok 0 0 47 0 3125 SMTP - - - -
2006-11-10 21:22:09 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 3125 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 453+Mail+from+207.30.146.150+not+allowed+-+[90] 0 0 47 0 250 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 453+Mail+from+207.30.146.150+not+allowed+-+[90] 0 0 47 0 250 SMTP - - - -
2006-11-10 21:22:09 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 3390 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mta145.mail.tp2.yahoo.com+ESMTP+YSmtp+service+ready 0 0 55 0 234 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 234 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 453+Mail+from+207.30.146.150+not+allowed+-+[90] 0 0 47 0 234 SMTP - - - -
2006-11-10 21:22:09 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 234 SMTP - - - -
2006-11-10 21:22:10 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14239+Message+accepted+for+delivery 0 0 42 0 3906 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mta145.mail.tp2.yahoo.com 0 0 29 0 469 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<ghdcydqpssavjq@ms65.hinet.net>+SIZE=3920 0 0 4 0 469 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+sender+<ghdcydqpssavjq@ms65.hinet.net>+ok 0 0 45 0 703 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<honchi0815@yahoo.com.tw> 0 0 4 0 703 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gkevens0915@yahoo.com.tw> 0 0 4 0 703 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+recipient+<honchi0815@yahoo.com.tw>+ok 0 0 42 0 922 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+recipient+<gkevens0915@yahoo.com.tw>+ok 0 0 43 0 922 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 922 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+go+ahead 0 0 12 0 1156 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 451+Message+temporarily+deferred+-+[90] 0 0 39 0 1438 SMTP - - - -
2006-11-10 21:22:10 203.188.197.10 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 1438 SMTP - - - -
2006-11-10 21:22:11 203.188.197.10 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mta145.mail.tp2.yahoo.com 0 0 29 0 1672 SMTP - - - -
2006-11-10 21:22:11 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mail01.ufhost.com+ESMTP+Postfix 0 0 35 0 2235 SMTP - - - -
2006-11-10 21:22:11 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 2235 SMTP - - - -
2006-11-10 21:22:12 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mail01.ufhost.com 0 0 21 0 2891 SMTP - - - -
2006-11-10 21:22:12 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=4680 0 0 4 0 2891 SMTP - - - -
2006-11-10 21:22:12 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 3531 SMTP - - - -
2006-11-10 21:22:12 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gotjf@oymg.com> 0 0 4 0 3531 SMTP - - - -
2006-11-10 21:22:12 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 7171 SMTP - - - -
2006-11-10 21:22:12 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 7390 SMTP - - - -
2006-11-10 21:22:12 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2609 0 0 4 0 7390 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 7656 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<ganxtlx.aemixs@msa.hinet.net> 0 0 4 0 7656 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<ganxtlx.aemixs@msa.hinet.net>...+Recipient+ok 0 0 50 0 7953 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 7953 SMTP - - - -
2006-11-10 21:22:13 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mail01.ufhost.com+ESMTP+Postfix 0 0 35 0 2890 SMTP - - - -
2006-11-10 21:22:13 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 2890 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 8218 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx168.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:20:39++0800+(CST) 0 0 85 0 3891 SMTP - - - -
2006-11-10 21:22:13 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 3891 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mail01.ufhost.com 0 0 21 0 3531 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx168.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 4110 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2704 0 0 4 0 4360 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=4679 0 0 4 0 3812 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 4641 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<blho.deqvyfd@msa.hinet.net> 0 0 4 0 4641 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 450+<gotjf@oymg.com>:+out+of+quota 0 0 34 0 5828 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 5828 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<blho.deqvyfd@msa.hinet.net>...+Recipient+ok 0 0 48 0 4985 SMTP - - - -
2006-11-10 21:22:15 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 4985 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 4453 SMTP - - - -
2006-11-10 21:22:15 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gotjf@oymg.com> 0 0 4 0 4453 SMTP - - - -
2006-11-10 21:22:16 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 5203 SMTP - - - -
2006-11-10 21:22:16 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14278+Message+accepted+for+delivery 0 0 42 0 9875 SMTP - - - -
2006-11-10 21:22:16 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 6485 SMTP - - - -
2006-11-10 21:22:16 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14286+Message+accepted+for+delivery 0 0 42 0 5485 SMTP - - - -
2006-11-10 21:22:16 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 6188 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 6406 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=3084 0 0 4 0 6406 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mail01.ufhost.com+ESMTP+Postfix 0 0 35 0 656 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 656 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 450+<gotjf@oymg.com>:+out+of+quota 0 0 34 0 6109 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 6109 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 6672 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<uyzjnqs.kbxfur@msa.hinet.net> 0 0 4 0 6672 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<uyzjnqs.kbxfur@msa.hinet.net>...+Recipient+ok 0 0 50 0 7125 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 7125 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mail01.ufhost.com 0 0 21 0 1297 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=4680 0 0 4 0 1297 SMTP - - - -
2006-11-10 21:22:17 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 6765 SMTP - - - -
2006-11-10 21:22:17 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 7360 SMTP - - - -
2006-11-10 21:22:18 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14297+Message+accepted+for+delivery 0 0 42 0 7641 SMTP - - - -
2006-11-10 21:22:18 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 1953 SMTP - - - -
2006-11-10 21:22:18 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gotjf@oymg.com> 0 0 4 0 1953 SMTP - - - -
2006-11-10 21:22:18 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mail01.ufhost.com+ESMTP+Postfix 0 0 35 0 656 SMTP - - - -
2006-11-10 21:22:18 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 656 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mail01.ufhost.com 0 0 21 0 1312 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=4679 0 0 4 0 1312 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 450+<gotjf@oymg.com>:+out+of+quota 0 0 34 0 3688 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 3688 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 1953 SMTP - - - -
2006-11-10 21:22:20 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gotjf@oymg.com> 0 0 4 0 1953 SMTP - - - -
2006-11-10 21:22:21 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 4328 SMTP - - - -
2006-11-10 21:22:21 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 4328 SMTP - - - -
2006-11-10 21:22:21 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+Bye 0 0 7 0 4969 SMTP - - - -
2006-11-10 21:22:21 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 15656 SMTP - - - -
2006-11-10 21:22:21 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 15875 SMTP - - - -
2006-11-10 21:22:21 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=3780 0 0 4 0 15875 SMTP - - - -
2006-11-10 21:22:21 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 11266 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 16125 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<fhsg.eml@msa.hinet.net> 0 0 4 0 16125 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 11500 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2789 0 0 4 0 11500 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<fhsg.eml@msa.hinet.net>...+Recipient+ok 0 0 44 0 16375 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 16375 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 11766 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<qiltm.vcww@msa.hinet.net> 0 0 4 0 11766 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 16609 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<qiltm.vcww@msa.hinet.net>...+Recipient+ok 0 0 46 0 12016 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 12016 SMTP - - - -
2006-11-10 21:22:22 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 12281 SMTP - - - -
2006-11-10 21:22:23 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14321+Message+accepted+for+delivery 0 0 42 0 12531 SMTP - - - -
2006-11-10 21:22:23 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 12531 SMTP - - - -
2006-11-10 21:22:23 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx168.hinet.net+closing+connection 0 0 38 0 12750 SMTP - - - -
2006-11-10 21:22:23 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA14320+Message+accepted+for+delivery 0 0 42 0 18093 SMTP - - - -
2006-11-10 21:22:23 168.95.5.168 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 18093 SMTP - - - -
2006-11-10 21:22:23 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 450+<gotjf@oymg.com>:+out+of+quota 0 0 34 0 5516 SMTP - - - -
2006-11-10 21:22:23 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 5516 SMTP - - - -
2006-11-10 21:22:24 168.95.5.168 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx168.hinet.net+closing+connection 0 0 38 0 18312 SMTP - - - -
2006-11-10 21:22:24 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Ok 0 0 6 0 6172 SMTP - - - -
2006-11-10 21:22:24 61.151.239.175 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 6172 SMTP - - - -
2006-11-10 21:22:25 61.151.239.175 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+Bye 0 0 7 0 6812 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx192.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:20:56++0800+(CST) 0 0 85 0 1235 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1235 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx192.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1438 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2587 0 0 4 0 1453 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 1656 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<fotyay.lhsq@msa.hinet.net> 0 0 4 0 1656 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<fotyay.lhsq@msa.hinet.net>...+Recipient+ok 0 0 47 0 1891 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 1891 SMTP - - - -
2006-11-10 21:22:28 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2110 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx160.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:20:57++0800+(CST) 0 0 85 0 1485 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1485 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx160.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:20:55++0800+(CST) 0 0 85 0 2593 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 2593 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA08851+Message+accepted+for+delivery 0 0 42 0 2360 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx160.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1703 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2588 0 0 4 0 1703 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx160.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 2812 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=3341 0 0 4 0 2812 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 1969 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<lsu.wys@msa.hinet.net> 0 0 4 0 1969 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 2813 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 3109 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<xvtqdvk.boaa@msa.hinet.net> 0 0 4 0 3109 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 3031 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2612 0 0 4 0 3031 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<lsu.wys@msa.hinet.net>...+Recipient+ok 0 0 43 0 2203 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 2203 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<xvtqdvk.boaa@msa.hinet.net>...+Recipient+ok 0 0 48 0 3453 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 3453 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 3250 SMTP - - - -
2006-11-10 21:22:29 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<tna.uvljsqr@msa.hinet.net> 0 0 4 0 3250 SMTP - - - -
2006-11-10 21:22:29 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2453 SMTP - - - -
2006-11-10 21:22:31 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 3687 SMTP - - - -
2006-11-10 21:22:31 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<tna.uvljsqr@msa.hinet.net>...+Recipient+ok 0 0 47 0 3500 SMTP - - - -
2006-11-10 21:22:31 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 3500 SMTP - - - -
2006-11-10 21:22:31 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00805+Message+accepted+for+delivery 0 0 42 0 2703 SMTP - - - -
2006-11-10 21:22:31 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00806+Message+accepted+for+delivery 0 0 42 0 3953 SMTP - - - -
2006-11-10 21:22:31 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 3703 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 3719 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 3938 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2687 0 0 4 0 3938 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 5234 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 4219 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<tbxaloe.bacd@msa.hinet.net> 0 0 4 0 4219 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 5437 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2631 0 0 4 0 5453 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<tbxaloe.bacd@msa.hinet.net>...+Recipient+ok 0 0 48 0 4516 SMTP - - - -
2006-11-10 21:22:32 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 4516 SMTP - - - -
2006-11-10 21:22:32 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA08887+Message+accepted+for+delivery 0 0 42 0 5438 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 5578 SMTP - - - -
2006-11-10 21:22:33 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 5843 SMTP - - - -
2006-11-10 21:22:33 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<zbhtkmx.odgph@msa.hinet.net> 0 0 4 0 5843 SMTP - - - -
2006-11-10 21:22:33 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 4766 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 5797 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2640 0 0 4 0 5797 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 6016 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<klymejx.pxcfef@msa.hinet.net> 0 0 4 0 6016 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<klymejx.pxcfef@msa.hinet.net>...+Recipient+ok 0 0 50 0 6250 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 6250 SMTP - - - -
2006-11-10 21:22:33 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 6469 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<zbhtkmx.odgph@msa.hinet.net>...+Recipient+ok 0 0 49 0 7453 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 7453 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00827+Message+accepted+for+delivery 0 0 42 0 6485 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 7687 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 6610 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 6860 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2650 0 0 4 0 6860 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00834+Message+accepted+for+delivery 0 0 42 0 7953 SMTP - - - -
2006-11-10 21:22:34 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA08962+Message+accepted+for+delivery 0 0 42 0 7735 SMTP - - - -
2006-11-10 21:22:34 168.95.5.209 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 7735 SMTP - - - -
2006-11-10 21:22:34 168.95.5.209 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx192.hinet.net+closing+connection 0 0 38 0 7938 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 7125 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<twg.wyohr@msa.hinet.net> 0 0 4 0 7125 SMTP - - - -
2006-11-10 21:22:34 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 8296 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<twg.wyohr@msa.hinet.net>...+Recipient+ok 0 0 45 0 7360 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 7360 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 8500 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2555 0 0 4 0 8500 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 7594 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 8765 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<fpc.ctjoshj@msa.hinet.net> 0 0 4 0 8765 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00852+Message+accepted+for+delivery 0 0 42 0 7875 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 7875 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<fpc.ctjoshj@msa.hinet.net>...+Recipient+ok 0 0 47 0 9093 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 9093 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx160.hinet.net+closing+connection 0 0 38 0 8094 SMTP - - - -
2006-11-10 21:22:35 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 9328 SMTP - - - -
2006-11-10 21:22:37 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00856+Message+accepted+for+delivery 0 0 42 0 9609 SMTP - - - -
2006-11-10 21:22:37 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 9609 SMTP - - - -
2006-11-10 21:22:37 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx160.hinet.net+closing+connection 0 0 38 0 9828 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx187.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:21:04++0800+(CST) 0 0 85 0 1765 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1765 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx187.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1984 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2626 0 0 4 0 1984 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 2250 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<sji.mir@msa.hinet.net> 0 0 4 0 2250 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<sji.mir@msa.hinet.net>...+Recipient+ok 0 0 43 0 2500 SMTP - - - -
2006-11-10 21:22:37 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 2500 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2718 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA27138+Message+accepted+for+delivery 0 0 42 0 2968 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 3047 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 3265 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2976 0 0 4 0 3265 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 3531 SMTP - - - -
2006-11-10 21:22:38 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<sudrl.eilq@msa.hinet.net> 0 0 4 0 3531 SMTP - - - -
2006-11-10 21:22:38 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx177.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:21:06++0800+(CST) 0 0 85 0 1485 SMTP - - - -
2006-11-10 21:22:38 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1485 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx177.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1688 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2624 0 0 4 0 1688 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 1922 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<wjtt.zequ@msa.hinet.net> 0 0 4 0 1922 SMTP - - - -
2006-11-10 21:22:39 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<sudrl.eilq@msa.hinet.net>...+Recipient+ok 0 0 46 0 4031 SMTP - - - -
2006-11-10 21:22:39 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 4031 SMTP - - - -
2006-11-10 21:22:39 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 4250 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<wjtt.zequ@msa.hinet.net>...+Recipient+ok 0 0 45 0 2157 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 2157 SMTP - - - -
2006-11-10 21:22:39 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2407 SMTP - - - -
2006-11-10 21:22:39 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA27161+Message+accepted+for+delivery 0 0 42 0 4500 SMTP - - - -
2006-11-10 21:22:39 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 4703 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 4922 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2633 0 0 4 0 4922 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 5140 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<glnqbnk.xfj@msa.hinet.net> 0 0 4 0 5140 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<glnqbnk.xfj@msa.hinet.net>...+Recipient+ok 0 0 47 0 5375 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 5375 SMTP - - - -
2006-11-10 21:22:40 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 5593 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA19614+Message+accepted+for+delivery 0 0 42 0 4610 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 4844 SMTP - - - -
2006-11-10 21:22:42 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA27195+Message+accepted+for+delivery 0 0 42 0 7062 SMTP - - - -
2006-11-10 21:22:42 168.95.5.249 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 7062 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 5047 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2598 0 0 4 0 5063 SMTP - - - -
2006-11-10 21:22:42 168.95.5.249 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx187.hinet.net+closing+connection 0 0 38 0 7281 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 5282 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<nbyliwv.fxejf@msa.hinet.net> 0 0 4 0 5282 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<nbyliwv.fxejf@msa.hinet.net>...+Recipient+ok 0 0 49 0 5579 SMTP - - - -
2006-11-10 21:22:42 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 5579 SMTP - - - -
2006-11-10 21:22:43 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 5782 SMTP - - - -
2006-11-10 21:22:43 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA19636+Message+accepted+for+delivery 0 0 42 0 6032 SMTP - - - -
2006-11-10 21:22:43 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 6532 SMTP - - - -
2006-11-10 21:22:43 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 6750 SMTP - - - -
2006-11-10 21:22:43 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2611 0 0 4 0 6750 SMTP - - - -
2006-11-10 21:22:44 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 6969 SMTP - - - -
2006-11-10 21:22:44 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<dzgsyi.abxdn@msa.hinet.net> 0 0 4 0 6969 SMTP - - - -
2006-11-10 21:22:44 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<dzgsyi.abxdn@msa.hinet.net>...+Recipient+ok 0 0 48 0 7235 SMTP - - - -
2006-11-10 21:22:44 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 7235 SMTP - - - -
2006-11-10 21:22:44 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 7454 SMTP - - - -
2006-11-10 21:22:46 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA19655+Message+accepted+for+delivery 0 0 42 0 8985 SMTP - - - -
2006-11-10 21:22:46 168.95.5.130 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 8985 SMTP - - - -
2006-11-10 21:22:46 168.95.5.130 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx177.hinet.net+closing+connection 0 0 38 0 9188 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx160.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:21:15++0800+(CST) 0 0 85 0 1515 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1515 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx160.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1734 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=3010 0 0 4 0 1734 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 2000 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<jvfhzy.qdck@msa.hinet.net> 0 0 4 0 2000 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<jvfhzy.qdck@msa.hinet.net>...+Recipient+ok 0 0 47 0 2406 SMTP - - - -
2006-11-10 21:22:48 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 2406 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2656 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00966+Message+accepted+for+delivery 0 0 42 0 2922 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 3062 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 3265 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2650 0 0 4 0 3265 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 3547 SMTP - - - -
2006-11-10 21:22:49 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<loanbs.yrfw@msa.hinet.net> 0 0 4 0 3547 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<loanbs.yrfw@msa.hinet.net>...+Recipient+ok 0 0 47 0 3781 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 3781 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 4015 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00982+Message+accepted+for+delivery 0 0 42 0 4265 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 4484 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 4703 SMTP - - - -
2006-11-10 21:22:50 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2613 0 0 4 0 4703 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 4953 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<magrljz.aitjd@msa.hinet.net> 0 0 4 0 4953 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<magrljz.aitjd@msa.hinet.net>...+Recipient+ok 0 0 49 0 5203 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 5203 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 5484 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA00986+Message+accepted+for+delivery 0 0 42 0 5750 SMTP - - - -
2006-11-10 21:22:51 168.95.5.160 OutboundConnectionCommand SMTPSVC1 NS1 - 25 QUIT - - 0 0 4 0 5750 SMTP - - - -
2006-11-10 21:22:52 168.95.5.160 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 221+mx160.hinet.net+closing+connection 0 0 38 0 5984 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 220+mx184.hinet.net+ESMTP+Sendmail+8.8.8/8.8.8;+Sat,
+11+Nov+2006+05:21:26++0800+(CST) 0 0 85 0 1688 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 EHLO - uptechusa.net 0 0 4 0 1688 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250-mx184.hinet.net+Hello+fl-207-30-146-150.sta.embarqhsd.net+
[207.30.146.150],+pleased+to+meet+you 0 0 99 0 1907 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2557 0 0 4 0 1907 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 2204 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<oygpsm.qlhx@msa.hinet.net> 0 0 4 0 2204 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<oygpsm.qlhx@msa.hinet.net>...+Recipient+ok 0 0 47 0 2469 SMTP - - - -
2006-11-10 21:22:59 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 DATA - - 0 0 4 0 2469 SMTP - - - -
2006-11-10 21:23:00 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 354+Enter+mail,+end+with+"."+on+a+line+by+itself 0 0 48 0 2844 SMTP - - - -
2006-11-10 21:23:00 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+FAA15166+Message+accepted+for+delivery 0 0 42 0 3125 SMTP - - - -
2006-11-10 21:23:00 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RSET - - 0 0 4 0 3532 SMTP - - - -
2006-11-10 21:23:00 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+Reset+state 0 0 15 0 3735 SMTP - - - -
2006-11-10 21:23:00 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 MAIL - FROM:<>+SIZE=2666 0 0 4 0 3735 SMTP - - - -
2006-11-10 21:23:01 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<>...+Sender+ok 0 0 19 0 4032 SMTP - - - -
2006-11-10 21:23:01 168.95.5.240 OutboundConnectionCommand SMTPSVC1 NS1 - 25 RCPT - TO:<gwjztd.qpmgxk@msa.hinet.net> 0 0 4 0 4032 SMTP - - - -
2006-11-10 21:23:01 168.95.5.240 OutboundConnectionResponse SMTPSVC1 NS1 - 25 - - 250+<gwjztd.qpmgxk@msa.hinet.net>...+Recipient+ok 0 0 49 0 4313 SMTP - - - -

 

[Marcs41]

Start with blocking the 168.95.5.* range and it shold already drop a lot.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all.
Free Tip: The F1 Key does NOT destroy your PC!}

 

[kbing]

PicouEnterprises,

207.30.146.150 is unreachable. Is this the sending IP address of your mail system? It does not appear to be the receiving mail address. When using other tools to see that address...it is also unreachable. Please confirm if this is your outgoing mail IP or incoming mail IP...

What I did was a lookup on sta.embarqhsd.net (I'm assuming this is the right domain, if not, let me know which domain is correct) which comes back as mail.embarqservices.net for the mail system. The IP address of the mail system is 209.26.88.20.

When I telnet to the 209.26.88.20 address (port 25), here is what I get.

220 ESMTP
helo test.com
250 embarqservices.net Hello machine.domain.com [1.1.1.1], pleased to meet you
mail from: test@test.com
250 2.1.0 test@test.com... Sender ok
rcpt to: johndoe@sta.embarqhsd.net
550 5.7.1 johndoe@sta.embarqhsd.net... Relaying denied
221 2.0.0 embarqservices.net closing connection

This tells me that you cannot relay off this mail system.

As for the logs, looks like mail is trying to be "sent" from this system to various other mail systems on the Internet. A lot of it looks like Spam. There are mail messages in the log that looks like they were sent correctly.

I would check the queues and delete all outgoing messages that look like spam.

Another thing to check is anti-virus for your systems. Do you have a server or windows client that has a virus and is using your mail system to send spam? If so, then you need to get rid of it.

Let me know about the domain...if that wasn't correct then I didn't do the test right.

The other question I have is - did you leave SMTP enabled and running. I think you should leave it online for several hours to see if the queues clear up.

Let me know.

 

[kbing]

Are you run a spam filter?

If not, I would seriously consider getting one. There is a cheaper one called CommuniGate Pro from

http://www.stalker.com

This works really well. It runs on Windows and or other platforms. Those pesky attempts at relaying on your system can be calmed down if you put something like this product in front of your exchange system.

Another more expensive option would be to get an appliance device such as Barracuda.

http://www.barracudanetworks.com/ns/?L=en

 

[webmastadj84]

The address is 207.30.146.150. That should be working. It is linked with the uptechusa.net domain name. embarq is my ISP (formally sprint) (web sites such as

http://www.auigroup.com,

doubleace.org are some of the few that are hosted on the server. It is also running DNS services).

I manually deleted all the queue's but then more get added once I enable the SMTP service again. And it is still sending out mail. The server is stand-alone and is not part of any working domain; which means, no other computers are connected to it.

As for software...I downloaded and install avast anti-virus. It didn't find any viruses. The SMTP service is up and running. It has been running all night. I will post the newer logs in the next few hours if needed. Is there any other better anti-virus software for a server. I don't need a 5 user liensce or anything, just a single liencse for a server.

 

[Marcs41]

There is NO MX record for uptechusa.net!

http://www.dnsstuff.com/tools/mail.ch?domain=uptechusa.net

Searching for uptechusa.net MX record at c.root-servers.net [192.33.4.12]: Got referral to A.GTLD-SERVERS.net. (zone: net.) [took 16 ms]
Searching for uptechusa.net MX record at A.GTLD-SERVERS.net. [192.5.6.30]: Got referral to ns1.uptechusa.net. (zone: uptechusa.net.) [took 144 ms]
Searching for uptechusa.net MX record at ns1.uptechusa.net. [207.30.146.150]: Reports that no MX records exist. [took 49 ms]

http://www.dnsstuff.com/tools/lookup.ch?name=uptechusa.net&type=MX

207.30.146.150 PTR record: fl-207-30-146-150.sta.embarqhsd.net. [TTL 86400s] [A=207.30.146.150]

http://www.dnsstuff.com/tools/whois.ch?ip=207.30.146.150

http://www.dnsstuff.com/tools/tracert.ch?ip=207.30.146.150

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all.
Free Tip: The F1 Key does NOT destroy your PC!}

 

[webmastadj84]

it passes everything on

http://www.checkdns.net/quickcheck.aspx?domain=uptechusa.net&detailed=1

There is an MX record now (just added)...think there was one there before.

 

[Marcs41]

Your mistake, your domain has a DNS entry, the A record, but it does (or did) not have an MX record!!!

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all.
Free Tip: The F1 Key does NOT destroy your PC!}