My Oracle Support Banner

Mailserver Being Used As A SPAM Relay - How Can We Track The User Causing This? (Doc ID 1925423.1)

Last updated on APRIL 20, 2021

Applies to:

Oracle Communications Messaging Server - Version 7.0.5 and later
Information in this document applies to any platform.


Oracle Communications Messaging Server 64bit

We have a problem where our mail server is being used as a SPAM relay.  We had to block 2 different IPs because they were identified and produced lots of messages in our log files.

Snippets from mail.log_current:

We do not have an entity called "User" as a username to authenticate.

All traffic to and from the Messaging Server passes through our Firewall.  Nothing was changed on either the Messaging Server or the Firewall when the problem started happening.

Normally, we allow unauthenticated connections from our own subnet; all other connections must be authenticated.




To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.