Ok, I think I found something in my logs.

I see a series of SMTP Auth commands.

The spammer is getting through an SMTP auth, and then reseting, then 
spamming like CRAZY.

So, I'm wondering, does ASSP, when it sees an SMTP Auth, still monitor 
the connections? Or does it pass it through with no problem.

Tis is hard to diagnose because the my ASSP is on the same server as my 
mail server, they're not seperate. So I'm trying to make sure it IS 
coming remotely, or if something else has been exploited on my server 
and they're doing it from there.

The SMTP AUTH makes me think its remote as it would be pointless if it 
was happing on the server.

Any tips on how ASSP handles SMTP AUTH?

Thanks for your help,
Chris

William Stucke wrote:
> Go to http://abuse.net/relay.html, register yourself, and run the tests from
> there. It does 14 separate tests, including forging anything you can think
> of. If all tests fail, you can be pretty sure that no one is relaying via
> your server. 
>
>
> Kind regards,
>
> William Stucke
> ZAnet Internet Services (Pty) Ltd
> [EMAIL PROTECTED]
> 083-308-0700 - WFS
> 011-460-0115 - Office
> 086-502-9444 - Fax
> http://www.zanet.co.za
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Chris Norman
> Sent: 05 April 2007 05:45 PM
> To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
> Subject: [Assp-user] Someone is able to relay off me (1.2.6 - win32)
>
> And I'm trying to figure out how.
>
> Does anyone know of a utility that will send email and try different
> parameters?
>
> Basically, I believe someone is getting through via the HELO they are
> passing.
>
> I need a way to test this other than telnet, as the firewall in front of my
> server detects that and blocks it.
>
> Can anyone recommend a site or small win32 tool?
>
> Thanks,
> Chris
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's
> Techsay panel and you'll get the chance to share your opinions on IT &
> business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Assp-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-user
>
>
>   


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to