<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>hi list</p>
<p>I got the following message from the server admin:</p>
<p><tt>Subject: SPAM-Alert! (SMTP)</tt><tt><br>
</tt><tt>Mon Oct 24 14:34:23 2016: User from IP 92.104.124.118
sent more than 200 emails in four hours.</tt></p>
<p>cool! didn't know excessive SMTP activity was monitored and
reported!</p>
<p>I figured out who sent those mail in /var/log/maillog:</p>
<p><font size="-1"><tt>Oct 24 16:33:10 vs sendmail[30489]:
STARTTLS=server,
relay=118.124.104.92.dynamic.wline.res.cust.swisscom.ch
[92.104.124.118], version=TLSv1/SSLv3, verify=NO,
cipher=DHE-RSA-AES256-SHA, bits=256/256<br>
Oct 24 16:33:10 vs sendmail[30489]: AUTH=server,
relay=118.124.104.92.dynamic.wline.res.cust.swisscom.ch
[92.104.124.118], authid=lpiatti, mech=PLAIN, bits=0<br>
Oct 24 16:33:10 vs sendmail[30489]: u9OEXA09030489:
118.124.104.92.dynamic.wline.res.cust.swisscom.ch
[92.104.124.118] did not issue MAIL/EXPN/VRFY/ETRN during
connection to TLSMTA</tt><tt></tt><tt><br>
</tt></font></p>
<p>what I don't is how this could happen... I have set a max of <b>25</b>
recipients per message in the GUI. How could the user <i>lpiatti</i>
override this?</p>
Thank you and best regards<br>
<br>
<div class="moz-signature">Meaulnes Legler
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td>~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~</td>
</tr>
<tr>
<td>~ <tt> <a class="moz-txt-link-abbreviated" href="http://www.WaveWeb.ch">www.WaveWeb.ch</a> </tt> ~</td>
</tr>
<tr>
<td>~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~</td>
</tr>
<tr>
<td>~ <small><tt>Zurich, Switzerland</tt></small> ~
<br>
~ <small><tt>tel: +41 44 2601660</tt></small> ~</td>
</tr>
</tbody>
</table>
<br>
</div>
</body>
</html>