Here are the options you have
Within server.tab:
[EnableAuthSMTP-POP3]
Enable SMTP after POP3 authentication (default on).
With this option whenever a user connects to check his mail (POP3) he is
authenticated for a small period of time to send mail from his IP with SMTP
to relay messages.
You should enable this option if you want, otherwise you must check the box
on your email software my SMTP server requires authentication so each time
a user connects to the server to send a mail the software will first send a
username and password and be permitted to relay messages to other servers.
If no username and password are used, then mail can only be delivered to
users that are defined on your server.
[mail-auth]
authentication required to send mail to the server. Please note that by
setting this value everything requires authentication, even for sending to
local domains, and this is probably not what you want.
With this option SMTP authentication is *REQUIRED* to send any mail to the
server. This is not the option you want, since it will deny other servers to
connect to yours and deliver mails to local users. If you enable this option
its sort of like locking the mail man out of your apartment building, noone
can get their mail because the mailman does not have a key and cannot get in
to deliver your mail.
You need to understand that what you want to restict is being on open relay,
that is spammers can connect to your server and send massive amounts of spam
to users on other servers. Spammers will always be able to connect directly
to your server and send spam mails directly to the users on your server,
since that is the only way possible to handle mail.
-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
nombre de Multisoft Solution
Enviado el: Wednesday, July 16, 2003 4:19 PM
Para: [EMAIL PROTECTED]
Asunto: [xmail] Re: Open Relay SPAM
Could you give me the example how to do it in detail?
Cause I want to make sure it safe, otherwise I would get another security
ticket from Spamcop.
Thanks,
Joe
- Original Message -
From: Andrew Joakimsen [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 16, 2003 4:12 PM
Subject: [xmail] Re: Open Relay SPAM
Why bother with all that? Just use optional SMTP auth + pop3 before smtp
auth. It works and its just as secure.
-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
nombre de Multisoft Solution
Enviado el: Wednesday, July 16, 2003 3:57 PM
Para: [EMAIL PROTECTED]
Asunto: [xmail] Re: Open Relay SPAM
I couldn't test again again with abuse.net, so I telnet to
relay-test.mail-abuse.org
The all test results are ...relay denied... when I used
SMTPRELAY.tab
205.xxx.xxx.0 TAB255.255.255.0ENTER
The SMTP.IPMAP.tab content still same:
0.0.0.0 TAB0.0.0.0 TABALLOWTAB1ENTER
1. Is it possible if spammer through other computers in my network
(205)
connect to my testing Linux server?
We have 2 production mail server, but both of them close relay (for sure).
2. POP3 / SMTP.IPMAP.tab is restrict certain IP to connect to POP3 / SMTP
server, right?
3. So nothing to do with relay, doesn't it?
4. If I would like to allow one IP, let say 205.100.10.1 so
SMTPRELAY.tab
205.xxx.xxx.1 TAB255.255.255.255ENTER ??
Thanks,
Joe
- Original Message -
From: Davide Libenzi [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, July 16, 2003 3:03 PM
Subject: [xmail] Re: Open Relay SPAM
On Wed, 16 Jul 2003, Multisoft Solution wrote:
I am pretty new in XMail and I do testing in Linux RedHat 9.1
I got a message from our ISP that SPAMCOP told our XMail testing
server
has
become spammers server/open relay I guess.
Yesterday I close the open relay through a change at:
SMTPRELAY.tab
205.xxx.xxx.0 TAB255.255.255.0ENTER
and I test using http://abuse.net/relay.html with result: Could not
connect,
test failed.
The above line does not prevent the relay test to be performed. With
such
line the relay test will fail. Are you sure you didn't touch
smtp.ipmap.tab ?
- Davide
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]
-
To unsubscribe from this list: send the line unsubscribe xmail in
the body of a message to [EMAIL PROTECTED]
For general help: send the line help in the body of a message to
[EMAIL PROTECTED]
-
To unsubscribe from this list: send the line unsubscribe xmail
