Mr. Falk, That mail server does not send out mail directly...it only forwards to our customers that have requested that their mail be forwarded to another of their accounts. If one of the users at pacific.net.ph is receiving spam to an address that he has forwarded through us, this would account for the high SMTP activity, but there is not anyone allowed to actually send from nf2.netforward.com (204.57.67.146). We are also running EShield, an ISP side antiSPAM program that does not allow forwarding or accept mail from outside our system on a relay..this pretty much rules out relay activity. I would have to say that my first assumption is the case, but I am not certain. What I can do is assure you that there is not any spamming or mail bombing coming from within our domains or being relayed through our domains. If there is anything else I can assist with, please feel free to contact me at the address below. Regards, CG _____________________________________ Chase Giles chaseg@myriad.net Network Administrator Myriad Internet Access, a TCA Company _____________________________________ -----Original Message----- From: J.D. Falk [SMTP:jdfalk@priori.net] Sent: Monday, November 10, 1997 1:40 PM To: william@pacific.net.ph Cc: nanog@merit.edu; jonny@myriad.net; webmaster@myriad.net Subject: Re: Spamming? On Nov 10, william@pacific.net.ph wrote:
We're seeing a drop in performance of our mail server.... Usage at >80%. Got a lot of SMTP's from 204.57.67.146....
If 204.57.67.146 is not somebody that you have authorized to use your mail server, you should block them. For more information, please see http://spam.abuse.net/. ********************************************************* J.D. Falk voice: +1-650-482-2840 Supervisor, Network Operations fax: +1-650-482-2844 PRIORI NETWORKS, INC. http://www.priori.net "The People You Know. The People You Trust." *********************************************************