i learned it Hard way
relay for local users only = OPEN RELAY

spammers put some 50,000 + emails everyday for 1 week, practially a DOS
attack for me,
and i kept fighthing thinking i was fighthing hackers and till i saw the
light :)
had to change my Ip's as i got listed in RBL's :(

# Check your SPOOL/QUE if its too big
# NO MAIL REALY or RELAY FOR ADDRESS is your destination with SMTP AUTH "ON"

Raj

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Stib
Sent: Tuesday, July 29, 2003 9:39 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [IMail Forum] Imail hacked??? URGENT help.


Hello, we are runing imail 6.04 and everything have worked fine....
last friday we had an successed hackattempt on our mailserver, we did stop
him after 20 minutes and thought all was fine.

But now we found out that we are an open relay. We have not changed the
settings and we have relay for local users only and not checked disable
SMTP AUTH reporting.

isn't this correct?

Also the "windowsettings" on the right side of admin (Not the treeview) is
totally messed up... We tried to reinstall the latest patch (6,04) but that
didn't solve.

Also when trying to connect with telnet we get error first try on ehlo and
success the second;
220 X1 NT-ESMTP Server stib.com (IMail 6.04 6-2)
ehlo denada.se
502 unimplemented command
ehlo denada.se
250-stib.com says hello

I think that indikates that something has been corrupted in Imail and
something is listening for some command att login...

Any ideas anyone????

// Pelle


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to