I did the test too... the last one said delivered but it actually went to my unknown mail box. So if someone tried to use that method I'd find it there.
Danny Mallory wrote: > Yes I think this is one of the things I noticed about the router log that > it can > appear misleading. This is the same with routing rules that may delete a > message, > but yet the router.log shows that it was delivered.. I guess its all about > understanding > where and what your looking at. > > At 10/13/2001 06:46 PM, you wrote: > >Hello Danny and thanks for your help. I did the test that Steffen suggested, > >and all passed except the last attempt which said it may or may not be an > >open relay but not sure since it was done as an anonymous test. I did check > >the server.log and all seemed to be rejected! > > > >Thanks again > > > >Vince > > > > > >Danny Mallory <[EMAIL PROTECTED]> wrote: > > >should be a server.old.. just drag it into notepad. > > > > > >At 10/13/2001 05:14 PM, you wrote: > > > > > >>That is one log I didn't check. I just checked the server.log, and it only > > >>had entries from the time I did a restart of the server which was about > >30 > > >>minutes ago. Are the server.log archived in same manner as the other > > files? > > >> But since you did the test, I can assume for now that my system at this > > >>point is not allowing relays to occur? > > >> > > >>I really appreciate all the help > > >> > > >>Vince! > > >> > > >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > >> >Does your server.log show any relay attempt denys? > > >> > > > >> >At 10/13/2001 03:53 PM, you wrote: > > >> > > > >> >>Hello Danny, > > >> >> > > >> >>Yes sir that is my mail server. Thank you very much for doing the test. > > >> >>I am not sure how the relaying was being done? I guess everything is > >ok > > >> >>now? Here is a sample of the smtp file I was looking at I am not > > including > > >> >>the actual ip address But as far as I can tell looks like this person > > >>was > > >> >>trying to relay through me? I have about 50 of these with the same ip > > > > >> address > > >> >>doing the relaying. I did a ip block here so I know who knowns the ip. > > >>Wonder > > >> >>if I should send the smtp log to the ip owner or just drop > > >> >>it? [13/Oct/2001:00:05:02 > > >> >>-0400] OK [000.00.000.00] [HELO] [0 bytes] > > >> xxx.xxx.xx.com[13/Oct/2001:00:05:02 > > >> >>-0400] OK [] [MAIL] [0 bytes] From: <[EMAIL PROTECTED]> > > >> >>[13/Oct/2001:00:05:03 -0400] OK [xxx.xx.xxx.xx] [RCPT] [0 bytes] > > >> >>To:<[EMAIL PROTECTED]> > > >> >> > > >> >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > >> >> >Assuming 216.68.165.38 is the mail server your questioning. I just > > >> >> >attempted to relay some > > >> >> >mail through it and got stopped with Require AUTH. > > >> >> > > > >> >> >The message could not be sent because one of the recipients was > > rejected > > >> >>by > > >> >> >the server. The rejected e-mail address was > > >> '[EMAIL PROTECTED]'. > > >> >> > > >> >> >Subject 'Testing 216.68.165.38 mail server', Account: > > 'letvffkeyit.com', > > >> >> > > >> >> >Server: '216.68.165.38', Protocol: SMTP, Server Response: '501 Invalid > > >>mail > > >> >> > > >> >> >recipient. Relay requires SMTP AUTH.', Port: 25, Secure(SSL): No, > >Server > > >> >> > > >> >> >Error: 501, Error Number: 0x800CCC79 > > >> >> > > > >> >> > > > >> >> >Danny > > >> >> > > > >> >> >At 10/13/2001 02:05 PM, you wrote: > > >> >> >>Hello Danny, and thanks for the help. I am still using version 5.0 > > >>here > > >> >>since > > >> >> >>it has been rock solid. I looked in my SMTP log and found one ip > > > > >> relaying > > >> >> >>a bunch of mail that were not for my users. I was under the > > impression > > >> >>that > > >> >> >>if the mail is not for a user of your system, that the smtp will > >not > > >>go > > >> >> > > >> >> >>through? > > >> >> >> Not sure what happened? . I thought if restrict ip address was > > left > > >> >>blank, > > >> >> >>an SMTP user may login from any host or has this changed with any > >newer > > >> >> > > >> >> >>version > > >> >> >>of Sambar? Thanks again have a great afternoon! > > >> >> >>Vince > > >> >> >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > >> >> >> >Require auth overrides relaying. If someone compromised one of > >your > > >>email > > >> >> >> > > >> >> >> >addresses > > >> >> >> >and password then they could have sent mail. Also, not sure what > > > > >> version > > >> >> >> > > >> >> >> >your at but > > >> >> >> >there was a known issue with the IP address in the restrict IP > >cause > > >> >>to > > >> >> >> > > >> >> >> >open you up > > >> >> >> >for relay break both require auth and restrict relay.. > > >> >> >> > > > >> >> >> >Try changing your restrict IP address to blank.. > > >> >> >> > > > >> >> >> >Danny > > >> >> >> > > > >> >> >> >At 10/13/2001 01:03 PM, you wrote: > > >> >> >> > > > >> >> >> >>Hello everyone, and hope everyone is doing well? > > >> >> >> >>I have a question about smtp relay. I have been using Sambar > >for > > >>a > > >> >>while > > >> >> >> >>now, and all seemed to be working great. It sure is a great > > program. > > >> >>I > > >> >> >>haven't > > >> >> >> >>touched anything, so I am not sure how someone was successfull > >in > > >>using > > >> >> >>my > > >> >> >> >>sambar mail server as a relay? I did trace the ip and blocked > >it > > >>using > > >> >> >> > > >> >> >> >>Blackice, > > >> >> >> >>but I am concerned in this happening again with all these attacks > > >>going > > >> >> >>on > > >> >> >> >>such as the Red Worm etc! > > >> >> >> >> > > >> >> >> >>I am turning to my fellow sambar users for help. Here is what > >I > > >>have > > >> >>in > > >> >> >> >>my config file. Am I missing something? Thanks in advance > > >> >> >> >> > > >> >> >> >>Vince > > >> >> >> >> > > >> >> >> >>Run SMTPD: Yes > > >> >> >> >>Relay Delivery: Forward immediately > > >> >> >> >>Relay Domains: I don't have anything in here > > >> >> >> >>Use MTA: Yes > > >> >> >> >>Unknown Mailbox: Null > > >> >> >> >>Require Auth: Yes > > >> >> >> >>Restrict Relay: Yes > > >> >> >> >>Restrict Relay IP: 127.0.0.1 > > >> >> >> >>Relay from User: I don't have anything here > > >> >> >> >> > > >> >> >> >> > > >> >> >> >>------------------------------------------------------------------ > > > > >> ------ > > >> >> > > >> >> >> -------- > > >> >> >> >>For unsubscription of this list send an email to > > [EMAIL PROTECTED] > > >> >>with > > >> >> >> > > >> >> >> >>email > > >> >> >> >>data containing unsubscribe emailadd sambar > > >> >> >> > > > >> >> >> > > > >> >> >> > > > >> >> >> > > > >> >> >> >------------------------------------------------------------------- > > > > >> ------ > > >> >> > > >> >> >> ------- > > >> >> >> >For unsubscription of this list send an email to > > [EMAIL PROTECTED] > > >> >>with > > >> >> >>email > > >> >> >> >data containing unsubscribe emailadd sambar > > >> >> >> > > > >> >> >> > > >> >> >> > > >> >> >>------------------------------------------------------------------ > > ------ > > >> > > >> >> -------- > > >> >> >>For unsubscription of this list send an email to [EMAIL PROTECTED] > > >>with > > >> >> > > >> >> >>email > > >> >> >>data containing unsubscribe emailadd sambar > > >> >> > > > >> >> > > > >> >> > > > >> >> > > > >> >> >------------------------------------------------------------------- > > ------ > > >> > > >> >> ------- > > >> >> >For unsubscription of this list send an email to [EMAIL PROTECTED] > > >>with > > >> >>email > > >> >> >data containing unsubscribe emailadd sambar > > >> >> > > > >> >> > > >> >> > > >> >>------------------------------------------------------------------------ > > > > >> -------- > > >> >>For unsubscription of this list send an email to [EMAIL PROTECTED] > >with > > >> > > >> >>email > > >> >>data containing unsubscribe emailadd sambar > > >> > > > >> > > > >> > > > >> > > > >> >------------------------------------------------------------------------- > > > > >> ------- > > >> >For unsubscription of this list send an email to [EMAIL PROTECTED] > >with > > >>email > > >> >data containing unsubscribe emailadd sambar > > >> > > > >> > > >> > > >>------------------------------------------------------------------------ > > -------- > > >>For unsubscription of this list send an email to [EMAIL PROTECTED] with > > > > >>email > > >>data containing unsubscribe emailadd sambar > > > > > > > > > > > > > > >------------------------------------------------------------------------- > > ------- > > >For unsubscription of this list send an email to [EMAIL PROTECTED] with > >email > > >data containing unsubscribe emailadd sambar > > > > > > > > >-------------------------------------------------------------------------------- > >For unsubscription of this list send an email to [EMAIL PROTECTED] with > >email > >data containing unsubscribe emailadd sambar > > -------------------------------------------------------------------------------- > For unsubscription of this list send an email to [EMAIL PROTECTED] with email > data containing unsubscribe emailadd sambar -------------------------------------------------------------------------------- For unsubscription of this list send an email to [EMAIL PROTECTED] with email data containing unsubscribe emailadd sambar
