[xmail] help! spammers can still send thru my xmail even if open relay is closed!

2006-01-04 Thread garlic breath
hi,

in my xmail log files I have:



 SMTP Relays  Total : 21205
|---|
1 [EMAIL PROTECTED] | 15
2 [EMAIL PROTECTED] | 15
3 [EMAIL PROTECTED] | 30
4 [EMAIL PROTECTED] | 14
5 [EMAIL PROTECTED] | 30
6 [EMAIL PROTECTED] | 15
7 [EMAIL PROTECTED] | 28
8 [EMAIL PROTECTED] | 45
9 [EMAIL PROTECTED] | 90
10 [EMAIL PROTECTED] | 15
11 [EMAIL PROTECTED] | 30
12 [EMAIL PROTECTED] | 45
13 [EMAIL PROTECTED] | 30
14 [EMAIL PROTECTED] | 30
15 [EMAIL PROTECTED] | 16
16 [EMAIL PROTECTED] | 30
17 [EMAIL PROTECTED] | 75
18 [EMAIL PROTECTED] | 112
19 [EMAIL PROTECTED] | 28
20 [EMAIL PROTECTED] | 16
21 [EMAIL PROTECTED] | 60
22 [EMAIL PROTECTED] | 45
23 [EMAIL PROTECTED] | 15
24 [EMAIL PROTECTED] | 28
25 [EMAIL PROTECTED] | 75
26 [EMAIL PROTECTED] | 75
27 [EMAIL PROTECTED] | 42
28 [EMAIL PROTECTED] | 15
29 [EMAIL PROTECTED] | 14
30 [EMAIL PROTECTED] | 30
31 [EMAIL PROTECTED] | 60
32 [EMAIL PROTECTED] | 14
33 [EMAIL PROTECTED] | 15
34 [EMAIL PROTECTED] | 14
35 [EMAIL PROTECTED] | 15
36 [EMAIL PROTECTED] | 30
37 [EMAIL PROTECTED] | 15
38 [EMAIL PROTECTED] | 60
39 [EMAIL PROTECTED] | 30
40 [EMAIL PROTECTED] | 60
41 [EMAIL PROTECTED] | 60
42 [EMAIL PROTECTED] | 105
43 [EMAIL PROTECTED] | 105
44 [EMAIL PROTECTED] | 70
45 [EMAIL PROTECTED] | 45
46 [EMAIL PROTECTED] | 64
47 [EMAIL PROTECTED] | 14
48 [EMAIL PROTECTED] | 90

rest is cut for brevity...

I dunno how they do itopen relay is closed since I have the only entries
in my smtprelay.tab are "127.0.0.1"  "255.0.0.0" and "192.168.0.0" "
255.255.0.0"

any ideas?



thanks

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: help! spammers can still send thru my xmail even if open relay is closed!

2006-01-04 Thread Bill Healy

Empty your smtprelay.tab file and see if that solves the problem. While
the file is empty you will have to set your local machines to send
authentication when sending mail, which is a good idea anyhow. If
emptying the file solves the problem and you really have a reason for
the localhost (127.0.0.1) to relay through xmail then put that entry
back, but make the mask 255.255.255.255.

Report on the results.

Bill


>--
>From:  garlic breath[SMTP:[EMAIL PROTECTED]
>Sent:  Wednesday, January 04, 2006 12:59 AM
>To:xmail@xmailserver.org
>Subject:   [xmail] help! spammers can still send thru my xmail even if open
>relay is closed!
>
>hi,
>
>in my xmail log files I have:
>
>
>
> SMTP Relays  Total : 21205
>|---|
>1 [EMAIL PROTECTED] | 15
>2 [EMAIL PROTECTED] | 15
>3 [EMAIL PROTECTED] | 30
>4 [EMAIL PROTECTED] | 14
>5 [EMAIL PROTECTED] | 30
>6 [EMAIL PROTECTED] | 15
>7 [EMAIL PROTECTED] | 28
>8 [EMAIL PROTECTED] | 45
>9 [EMAIL PROTECTED] | 90
>10 [EMAIL PROTECTED] | 15
>11 [EMAIL PROTECTED] | 30
>12 [EMAIL PROTECTED] | 45
>13 [EMAIL PROTECTED] | 30
>14 [EMAIL PROTECTED] | 30
>15 [EMAIL PROTECTED] | 16
>16 [EMAIL PROTECTED] | 30
>17 [EMAIL PROTECTED] | 75
>18 [EMAIL PROTECTED] | 112
>19 [EMAIL PROTECTED] | 28
>20 [EMAIL PROTECTED] | 16
>21 [EMAIL PROTECTED] | 60
>22 [EMAIL PROTECTED] | 45
>23 [EMAIL PROTECTED] | 15
>24 [EMAIL PROTECTED] | 28
>25 [EMAIL PROTECTED] | 75
>26 [EMAIL PROTECTED] | 75
>27 [EMAIL PROTECTED] | 42
>28 [EMAIL PROTECTED] | 15
>29 [EMAIL PROTECTED] | 14
>30 [EMAIL PROTECTED] | 30
>31 [EMAIL PROTECTED] | 60
>32 [EMAIL PROTECTED] | 14
>33 [EMAIL PROTECTED] | 15
>34 [EMAIL PROTECTED] | 14
>35 [EMAIL PROTECTED] | 15
>36 [EMAIL PROTECTED] | 30
>37 [EMAIL PROTECTED] | 15
>38 [EMAIL PROTECTED] | 60
>39 [EMAIL PROTECTED] | 30
>40 [EMAIL PROTECTED] | 60
>41 [EMAIL PROTECTED] | 60
>42 [EMAIL PROTECTED] | 105
>43 [EMAIL PROTECTED] | 105
>44 [EMAIL PROTECTED] | 70
>45 [EMAIL PROTECTED] | 45
>46 [EMAIL PROTECTED] | 64
>47 [EMAIL PROTECTED] | 14
>48 [EMAIL PROTECTED] | 90
>
>rest is cut for brevity...
>
>I dunno how they do itopen relay is closed since I have the only entries
>in my smtprelay.tab are "127.0.0.1"  "255.0.0.0" and "192.168.0.0" "
>255.255.0.0"
>
>any ideas?
>
>
>
>thanks
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: help! spammers can still send thru my xmail even if open relay is closed!

2006-01-04 Thread Leonardo Fogel


--- garlic breath wrote:

> I dunno how they do itopen relay is closed since
> I have the only entries
> in my smtprelay.tab are "127.0.0.1"  "255.0.0.0" and
> "192.168.0.0" "255.255.0.0"
> 
> any ideas?
> 

Hi.
_Maybe_ a virus, adware etc. in a workstation in your
LAN is sending those messagens. Did you check their
source IP?

Regards.








___ 
Yahoo! doce lar. Faça do Yahoo! sua homepage. 
http://br.yahoo.com/homepageset.html 

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Command line mailer problems

2006-01-04 Thread Adrian Hicks

Hi all.

I've recently upgraded from 1.17 and have also upgraded the OS, & have one 
small issue re. sending of mail from scripts.

Using 1.22 on Debian Testing (Etch).

I have a filter (bash script) that replies to senders on some conditions.  
This script uses the mail utility and includes an extra header for the 
sender (see below):

begin ---
mail -s "Spam? / Request for mail access" -a "From: [EMAIL PROTECTED]"  
"$fromsender" < /var/MailRoot/filters/htmlreply.msg
end ---

On the new machine I receive many errors (old one no problems).  The errors 
show the sender of the original message as [EMAIL PROTECTED] (which I assume 
is from the Return-path: header) rather than the sender I have specified 
in the command.

And the bounces I get show that the recipient's server also sees 
[EMAIL PROTECTED] rather than the address I specify (see below).

begin ---
[<00>] XMail bounce: [EMAIL PROTECTED];Error=[501 Syntax 
error in parameters or arguments]


[<01>] Error sending message 
[1136437219344.2899659696.c5.merlin.auston.com] from [sing.auston.com].

ID:
Mail From: <[EMAIL PROTECTED]>
Rcpt To:   <[EMAIL PROTECTED]>
Server: [64.156.215.18]

[<02>] The reason of the delivery failure was:

501 Syntax error in parameters or arguments
end ---


Any thoughts?

Thanks.


Adrian Hicks
-- 
MIS Manager
Auston Institute of Management & Technology
45 Middle Rd, #01-00 Auston Unicentre
Singapore

Tel: 6339 7700
Fax: 6339 7600
Web: http://www.auston.edu.sg/
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]