On Mon, Jul 17, 2000 at 11:30:57PM +0000, John Henders wrote:
> 2000-07-16 05:22:07 13DnQr-0000Dw-00 <= foo@???
> H=localhost (family2) [127.0.0.1] P=smtp S=3384
> id=001101bfef1e$e94f2a00$2100a8c0@family2
A wild guess, but could the user be running fetchmail? That could give
you smtp connections from localhost.
Dave
--
David Holland -=*=- Systems Administration Manager
http://www.3glab.com/ -=*=- 3G Lab, Cambridgeshire, UK
"...a statistical certainty given infinite time..."