Re[2]: [vps-mail] Issue re sendmail/ abuse (attempted relay????)

[Abigail Marshall <webmaster@xxxxxxxxxxxx>]

SW> FYI, when you put a REJECT in your access.db, the connection is
SW> IMMEDIATELY rejected when the remote host connects (i.e., sendmail
SW> devotes no more resources beyond a socket connection once you've
SW> connected from the remote host).

OK, well he gave up and went away about 5 hours ago....

Another question: what does this message mean:
" collect: unexpected close on connection from [IP or
domain]"

I've got 1768 of those, all within the past 24 hours, all
coming from about 4 different domains or IPs.

I've got a suspicion that it's the work of Sobig, as sender
names don't match the IPs (example: aw-confirm@xxxxxxxx),
and a bunch of them have emails from our website listed as
the "sender".... but I'm still curious as to exactly what is
going on.

-Abigail

======================================================================
Technical questions regarding this list may be sent to
<vps-mail-owner@xxxxxxxxxxxx>. You may request an automated help
response by sending an email with the word 'help' (w/o quotes) in the
BODY of the message (subject is ignored) to <vps-mail-request@xxxxxxxxxxxx>.
======================================================================