Hi yes we are using SMTP authentication in the AUTH Password file

Hi

We use Mercury as SMTP transport only and dont use the mail boxes, recently we have had a user abuse the server and use there account to send spam 27gb worth in 24 hrs and the only way we could stop him (due to him having a dynamic ip) was with this script,  H, "*name of his computer*", R, "554 Stop spamming our server"  but we still dont know his username so we can not delete his account, is there a way to find out or log usernames as they login? all i could find was MD5 hash usernames and passowrds in the logs which is no good.

Thank you

Glenn

Are you not using SMTP authentication?  If you are using authentication it's easy to decode the Base64 string to get the username from a MercuryS session log.