Untangle Forums - View Single Post

gdatkins · 06-11-2009, 01:11 PM

Greetings,

I am either having trouble interpreting what I am seeing in the Protocol Control event log, or I'm having trouble believing what I am seeing.

There is a SMTP event (logged and passed, not blocked) about once per minute. The client is always an ip on a class A network - always the same subnet. The Server is always our Exchange server.

We have only 10 users and spam is filtered before it gets to us...there is no way there is an email - incoming or outgoing - once per minute. Exchange Message Tracking confirms this.

What should I take away from this? Are we a spam factory?

Thanks,

06-11-2009, 01:11 PM	#1 (permalink)
gdatkins Newbie Join Date: Jan 2009 Posts: 2	Interpreting Protocol Control Event Log Greetings, I am either having trouble interpreting what I am seeing in the Protocol Control event log, or I'm having trouble believing what I am seeing. There is a SMTP event (logged and passed, not blocked) about once per minute. The client is always an ip on a class A network - always the same subnet. The Server is always our Exchange server. We have only 10 users and spam is filtered before it gets to us...there is no way there is an email - incoming or outgoing - once per minute. Exchange Message Tracking confirms this. What should I take away from this? Are we a spam factory? Thanks,