Very indecent mail servers indeed! Someone on our network is sending 419 scam emails and that could land us in trouble if we don't do something about it soon. We block port 25 on our firewall so people must use our SMTP mail server for outgoing email. I got an alert from Spamcop but could not find anything on our mail server log file so I suspect that the sender is connecting directly to an external email server on port 80. I will take a look at the Squid log file access.log maybe it will shed some light on this :) Greg -----Original Message----- From: Christoph Haas [mailto:email@xxxxxxxxxxxxxxxxx] Sent: 01 August 2006 22:00 To: squid-users@xxxxxxxxxxxxxxx Subject: Re: Controlling Spam On Tuesday 01 August 2006 23:44, Gregory EID wrote: > Squid is running on same machine as my firewall Shorewall doing NAT so > all outgoing emails have the same IP of Shorewall 196.44.102.241 > > When a client sends outgoing email using port 80 bypassing our SMTP > server (using port 25) the IP address that recipients see is our > Shorewall and we are concerned that anti-spam databases will blacklist > our Shorewall IP, which will block our entire network. Which decent external SMTP mail server is listening on any port but 25 (SSL ports aside)? Christoph
