Re: [sambar] SMTP Relay problem?

[Jim Burns]

I don't have "AUTH" set nor do I have an "unknown" box. My server passed with no trouble at all. http://www.attitudejim.com/relay.html Jim On 14/Oct/2001 08:49:21, Windjammer wrote: > I did the test too... the last one said delivered but it actually went to my unknown > mail box. So if someone tried to use that method I'd find it there. > > Danny Mallory wrote: > > > Yes I think this is one of the things I noticed about the router log that > > it can > > appear misleading. This is the same with routing rules that may delete a > > message, > > but yet the router.log shows that it was delivered.. I guess its all about > > understanding > > where and what your looking at. > > > > At 10/13/2001 06:46 PM, you wrote: > > >Hello Danny and thanks for your help. I did the test that Steffen suggested, > > >and all passed except the last attempt which said it may or may not be an > > >open relay but not sure since it was done as an anonymous test. I did check > > >the server.log and all seemed to be rejected! > > > > > >Thanks again > > > > > >Vince > > > > > > > > >Danny Mallory <[EMAIL PROTECTED]> wrote: > > > >should be a server.old.. just drag it into notepad. > > > > > > > >At 10/13/2001 05:14 PM, you wrote: > > > > > > > >>That is one log I didn't check. I just checked the server.log, and it only > > > >>had entries from the time I did a restart of the server which was about > > >30 > > > >>minutes ago. Are the server.log archived in same manner as the other > > > files? > > > >> But since you did the test, I can assume for now that my system at this > > > >>point is not allowing relays to occur? > > > >> > > > >>I really appreciate all the help > > > >> > > > >>Vince! > > > >> > > > >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > > >> >Does your server.log show any relay attempt denys? > > > >> > > > > >> >At 10/13/2001 03:53 PM, you wrote: > > > >> > > > > >> >>Hello Danny, > > > >> >> > > > >> >>Yes sir that is my mail server. Thank you very much for doing the test. > > > >> >>I am not sure how the relaying was being done? I guess everything is > > >ok > > > >> >>now? Here is a sample of the smtp file I was looking at I am not > > > including > > > >> >>the actual ip address But as far as I can tell looks like this person > > > >>was > > > >> >>trying to relay through me? I have about 50 of these with the same ip > > > > > > >> address > > > >> >>doing the relaying. I did a ip block here so I know who knowns the ip. > > > >>Wonder > > > >> >>if I should send the smtp log to the ip owner or just drop > > > >> >>it? [13/Oct/2001:00:05:02 > > > >> >>-0400] OK [000.00.000.00] [HELO] [0 bytes] > > > >> xxx.xxx.xx.com[13/Oct/2001:00:05:02 > > > >> >>-0400] OK [] [MAIL] [0 bytes] From: <[EMAIL PROTECTED]> > > > >> >>[13/Oct/2001:00:05:03 -0400] OK [xxx.xx.xxx.xx] [RCPT] [0 bytes] > > > >> >>To:<[EMAIL PROTECTED]> > > > >> >> > > > >> >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > > >> >> >Assuming 216.68.165.38 is the mail server your questioning. I just > > > >> >> >attempted to relay some > > > >> >> >mail through it and got stopped with Require AUTH. > > > >> >> > > > > >> >> >The message could not be sent because one of the recipients was > > > rejected > > > >> >>by > > > >> >> >the server. The rejected e-mail address was > > > >> '[EMAIL PROTECTED]'. > > > >> >> > > > >> >> >Subject 'Testing 216.68.165.38 mail server', Account: > > > 'letvffkeyit.com', > > > >> >> > > > >> >> >Server: '216.68.165.38', Protocol: SMTP, Server Response: '501 Invalid > > > >>mail > > > >> >> > > > >> >> >recipient. Relay requires SMTP AUTH.', Port: 25, Secure(SSL): No, > > >Server > > > >> >> > > > >> >> >Error: 501, Error Number: 0x800CCC79 > > > >> >> > > > > >> >> > > > > >> >> >Danny > > > >> >> > > > > >> >> >At 10/13/2001 02:05 PM, you wrote: > > > >> >> >>Hello Danny, and thanks for the help. I am still using version 5.0 > > > >>here > > > >> >>since > > > >> >> >>it has been rock solid. I looked in my SMTP log and found one ip > > > > > > >> relaying > > > >> >> >>a bunch of mail that were not for my users. I was under the > > > impression > > > >> >>that > > > >> >> >>if the mail is not for a user of your system, that the smtp will > > >not > > > >>go > > > >> >> > > > >> >> >>through? > > > >> >> >> Not sure what happened? . I thought if restrict ip address was > > > left > > > >> >>blank, > > > >> >> >>an SMTP user may login from any host or has this changed with any > > >newer > > > >> >> > > > >> >> >>version > > > >> >> >>of Sambar? Thanks again have a great afternoon! > > > >> >> >>Vince > > > >> >> >>Danny Mallory <[EMAIL PROTECTED]> wrote: > > > >> >> >> >Require auth overrides relaying. If someone compromised one of > > >your > > > >>email > > > >> >> >> > > > >> >> >> >addresses > > > >> >> >> >and password then they could have sent mail. Also, not sure what > > > > > > >> version > > > >> >> >> > > > >> >> >> >your at but > > > >> >> >> >there was a known issue with the IP address in the restrict IP > > >cause > > > >> >>to > > > >> >> >> > > > >> >> >> >open you up > > > >> >> >> >for relay break both require auth and restrict relay.. > > > >> >> >> > > > > >> >> >> >Try changing your restrict IP address to blank.. > > > >> >> >> > > > > >> >> >> >Danny > > > >> >> >> > > > > >> >> >> >At 10/13/2001 01:03 PM, you wrote: > > > >> >> >> > > > > >> >> >> >>Hello everyone, and hope everyone is doing well? > > > >> >> >> >>I have a question about smtp relay. I have been using Sambar > > >for > > > >>a > > > >> >>while > > > >> >> >> >>now, and all seemed to be working great. It sure is a great > > > program. > > > >> >>I > > > >> >> >>haven't > > > >> >> >> >>touched anything, so I am not sure how someone was successfull > > >in > > > >>using > > > >> >> >>my > > > >> >> >> >>sambar mail server as a relay? I did trace the ip and blocked > > >it > > > >>using > > > >> >> >> > > > >> >> >> >>Blackice, > > > >> >> >> >>but I am concerned in this happening again with all these attacks > > > >>going > > > >> >> >>on > > > >> >> >> >>such as the Red Worm etc! > > > >> >> >> >> > > > >> >> >> >>I am turning to my fellow sambar users for help. Here is what > > >I > > > >>have > > > >> >>in > > > >> >> >> >>my config file. Am I missing something? Thanks in advance > > > >> >> >> >> > > > >> >> >> >>Vince > > > >> >> >> >> > > > >> >> >> >>Run SMTPD: Yes > > > >> >> >> >>Relay Delivery: Forward immediately > > > >> >> >> >>Relay Domains: I don't have anything in here > > > >> >> >> >>Use MTA: Yes > > > >> >> >> >>Unknown Mailbox: Null > > > >> >> >> >>Require Auth: Yes > > > >> >> >> >>Restrict Relay: Yes > > > >> >> >> >>Restrict Relay IP: 127.0.0.1 > > > >> >> >> >>Relay from User: I don't have anything here > > > >> >> >> >> > > > >> >> >> >> > > > >> >> >> >>------------------------------------------------------------------ > > > > > > >> ------ > > > >> >> > > > >> >> >> -------- > > > >> >> >> >>For unsubscription of this list send an email to > > > [EMAIL PROTECTED] > > > >> >>with > > > >> >> >> > > > >> >> >> >>email > > > >> >> >> >>data containing unsubscribe emailadd sambar > > > >> >> >> > > > > >> >> >> > > > > >> >> >> > > > > >> >> >> > > > > >> >> >> >------------------------------------------------------------------- > > > > > > >> ------ > > > >> >> > > > >> >> >> ------- > > > >> >> >> >For unsubscription of this list send an email to > > > [EMAIL PROTECTED] > > > >> >>with > > > >> >> >>email > > > >> >> >> >data containing unsubscribe emailadd sambar > > > >> >> >> > > > > >> >> >> > > > >> >> >> > > > >> >> >>------------------------------------------------------------------ > > > ------ > > > >> > > > >> >> -------- > > > >> >> >>For unsubscription of this list send an email to [EMAIL PROTECTED] > > > >>with > > > >> >> > > > >> >> >>email > > > >> >> >>data containing unsubscribe emailadd sambar > > > >> >> > > > > >> >> > > > > >> >> > > > > >> >> > > > > >> >> >------------------------------------------------------------------- > > > ------ > > > >> > > > >> >> ------- > > > >> >> >For unsubscription of this list send an email to [EMAIL PROTECTED] > > > >>with > > > >> >>email > > > >> >> >data containing unsubscribe emailadd sambar > > > >> >> > > > > >> >> > > > >> >> > > > >> >>------------------------------------------------------------------------ > > > > > > >> -------- > > > >> >>For unsubscription of this list send an email to [EMAIL PROTECTED] > > >with > > > >> > > > >> >>email > > > >> >>data containing unsubscribe emailadd sambar > > > >> > > > > >> > > > > >> > > > > >> > > > > >> >------------------------------------------------------------------------- > > > > > > >> ------- > > > >> >For unsubscription of this list send an email to [EMAIL PROTECTED] > > >with > > > >>email > > > >> >data containing unsubscribe emailadd sambar > > > >> > > > > >> > > > >> > > > >>------------------------------------------------------------------------ > > > -------- > > > >>For unsubscription of this list send an email to [EMAIL PROTECTED] with > > > > > > >>email > > > >>data containing unsubscribe emailadd sambar > > > > > > > > > > > > > > > > > > > >------------------------------------------------------------------------- > > > ------- > > > >For unsubscription of this list send an email to [EMAIL PROTECTED] with > > >email > > > >data containing unsubscribe emailadd sambar > > > > > > > > > > > > >-------------------------------------------------------------------------------- > > >For unsubscription of this list send an email to [EMAIL PROTECTED] with > > >email > > >data containing unsubscribe emailadd sambar > > > > -------------------------------------------------------------------------------- > > For unsubscription of this list send an email to [EMAIL PROTECTED] with email > > data containing unsubscribe emailadd sambar > > > > -------------------------------------------------------------------------------- > For unsubscription of this list send an email to [EMAIL PROTECTED] with email > data containing unsubscribe emailadd sambar > > -------------------------------------------------------------------------------- For unsubscription of this list send an email to [EMAIL PROTECTED] with email data containing unsubscribe emailadd sambar