[xmail] Re: Open relay ?

2004-02-09 Thread Filip Supera
Davide Libenzi a écrit :

> On Mon, 9 Feb 2004, Tim Aranki wrote:
> 
> 
>>Filip,
>>Do you have a catch all alias setup?  My guess, is that it did not relay the
>>message, but rather delivered it to your catch all account. 
> 
> 
> This is likely the case, since XMail does not support [EMAIL PROTECTED]
> 

Yes, that was it. libre-essai.net was a custom domain with 
domain redirection...

Changed it to a normal domain.

Relay test result
All tests performed, no relays accepted :-)

Thanks Tim and Davide.

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open relay ?

2004-02-09 Thread Filip Supera
Mircea Ciocan a écrit :

> Eh Davide, maybe is time to have the smtprelay.tab with 
> "127.0.0.1"[TAB]"255.255.255.255", the rpms I build are this way, it 
> seem that NOBODY read the documentation BEFORE installing and starting 
> Xmailserver :(.

This is not true :-) I did read it.

> 
> Filip just clear everything in the smtprelay.tab and put only this 
> line: "127.0.0.1"[TAB]"255.255.255.255" where [TAB] is really a tab 
> char, and configure your clients to use authentication, or you can also 
> add there the trusted network to be acceptedas is clearly written in 
> docs (maybe you'll like to read them all), XMailserver by default comes 
> as an open relay !!!

My smtprelay.tab was empty. Following your instructions, I 
added "127.0.0.1"   "255.255.255.255" to see if it changes 
anything but I still fail the test at point 6.

Am I the only one ?
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open relay ?

2004-02-09 Thread Davide Libenzi
On Mon, 9 Feb 2004, Tim Aranki wrote:

> Filip,
> Do you have a catch all alias setup?  My guess, is that it did not relay the
> message, but rather delivered it to your catch all account. 

This is likely the case, since XMail does not support [EMAIL PROTECTED]



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open relay ?

2004-02-09 Thread Tim Aranki
Filip,
Do you have a catch all alias setup?  My guess, is that it did not relay the
message, but rather delivered it to your catch all account. 
-tim 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Filip Supera
Sent: Monday, February 09, 2004 11:28 AM
To: [EMAIL PROTECTED]
Subject: [xmail] Open relay ?

Hello,

According to http://www.abuse.net/relay.html, my libre-essai.net (running
XMail 1.18) fails on the Relay test 6 :

 >>> RSET
<<< 250 OK
 >>> MAIL FROM:<[EMAIL PROTECTED]> <<< 250 OK  >>> RCPT
TO:<[EMAIL PROTECTED]>
<<< 250 OK

Relay test result :
"Hmmn, at first glance, host appeared to accept a message for relay."

What should I do ?

Thanks !

--
Fil.
-
To unsubscribe from this list: send the line "unsubscribe xmail" in the body
of a message to [EMAIL PROTECTED] For general help: send the line
"help" in the body of a message to [EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open relay ?

2004-02-09 Thread Mircea Ciocan
Eh Davide, maybe is time to have the smtprelay.tab with 
"127.0.0.1"[TAB]"255.255.255.255", the rpms I build are this way, it 
seem that NOBODY read the documentation BEFORE installing and starting 
Xmailserver :(.

Filip just clear everything in the smtprelay.tab and put only this 
line: "127.0.0.1"[TAB]"255.255.255.255" where [TAB] is really a tab 
char, and configure your clients to use authentication, or you can also 
add there the trusted network to be acceptedas is clearly written in 
docs (maybe you'll like to read them all), XMailserver by default comes 
as an open relay !!!

http://xmailserver.org/Readme.html#smtprelay.tab

Mircea

Filip Supera wrote:

>Hello,
>
>According to http://www.abuse.net/relay.html,
>my libre-essai.net (running XMail 1.18) fails on the Relay 
>test 6 :
>
> >>> RSET
><<< 250 OK
> >>> MAIL FROM:<[EMAIL PROTECTED]>
><<< 250 OK
> >>> RCPT TO:<[EMAIL PROTECTED]>
><<< 250 OK
>
>Relay test result :
>"Hmmn, at first glance, host appeared to accept a message 
>for relay."
>
>What should I do ?
>
>Thanks !
>
>  
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay

2004-01-16 Thread Ben Ede
OK I have found my hole. In the aliases.tab I have one catchall address
that forwards all mail for that domain to another account (in the same
domain), removing this line solves all the open relay problems. Has
anyone got any idea how I can have a catch all without the spam?

Thanks

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Mircea Ciocan
Sent: 16 January 2004 16:13
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Open Relay

Ben Ede wrote:

>HI,
>
>I've just set up xmail on a Redhat7.2 server. I've run a open relay
>check on it and unfortunately it has come back as saying there are
>vulnerabilities. I have used the 'out of the box' config. Can anyone
>point me in the right direction to sort out these probs?
>
>Thanks
>
>Ben
>
>
Hi Ben,

Go to /var/MailRoot and edit the file smtprelay.tab, delete
everything and put only this line:
"127.0.0.1"[TAB]"255.255.255.255"[CR]

[TAB] and [CR] must be the real characters from keyboard.

This will allow relay only from your machine ( localhost).
The other users will have to use authentication ( their full e-mail and
the password).
The mails for the domains you handle will arrive undisturbed.

Mircea



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay

2004-01-16 Thread Ben Ede
I entered the following into the smtprelay.tab
"127.0.0.1" "255.255.255.0"
Thinking that would stop the problem. I then ran the following to test
the relay but I am still not getting a cleansheet! Any ideas?

telnet relay-test.mail-abuse.org

Thanks

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Bowen Moursund
Sent: 16 January 2004 16:01
To: [EMAIL PROTECTED]
Subject: [xmail] Re: Open Relay

> I've just set up xmail on a Redhat7.2 server. I've run a open relay
> check on it and unfortunately it has come back as saying there are
> vulnerabilities. I have used the 'out of the box' config. Can anyone
> point me in the right direction to sort out these probs?

As noted in the documentation, insert the correct directives into
smtprelay.tab. You can simply empty the file if all your users will be
authenticating via POP before sending mail.


Bowen Moursund

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay

2004-01-16 Thread Mircea Ciocan
Ben Ede wrote:

>HI,
>
>I've just set up xmail on a Redhat7.2 server. I've run a open relay
>check on it and unfortunately it has come back as saying there are
>vulnerabilities. I have used the 'out of the box' config. Can anyone
>point me in the right direction to sort out these probs?
>
>Thanks
>
>Ben
>  
>
Hi Ben,

Go to /var/MailRoot and edit the file smtprelay.tab, delete 
everything and put only this line:
"127.0.0.1"[TAB]"255.255.255.255"[CR]

[TAB] and [CR] must be the real characters from keyboard.

This will allow relay only from your machine ( localhost).
The other users will have to use authentication ( their full e-mail and 
the password).
The mails for the domains you handle will arrive undisturbed.

Mircea



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay

2004-01-16 Thread Bowen Moursund
> I've just set up xmail on a Redhat7.2 server. I've run a open relay
> check on it and unfortunately it has come back as saying there are
> vulnerabilities. I have used the 'out of the box' config. Can anyone
> point me in the right direction to sort out these probs?

As noted in the documentation, insert the correct directives into
smtprelay.tab. You can simply empty the file if all your users will be
authenticating via POP before sending mail.


Bowen Moursund

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay & SPAM

2003-07-16 Thread Andrew Joakimsen

Here are the options you have

Within server.tab:

[EnableAuthSMTP-POP3]

Enable SMTP after POP3 authentication (default on).


With this option whenever a user connects to check his mail (POP3) he is
authenticated for a small period of time to send mail from his IP with SMTP
to relay messages.

You should enable this option if you want, otherwise you must check the box
on your email software "my SMTP server requires authentication" so each time
a user connects to the server to send a mail the software will first send a
username and password and be permitted to relay messages to other servers.
If no username and password are used, then mail can only be delivered to
users that are defined on your server.

[mail-auth]

authentication required to send mail to the server. Please note that by
setting this value everything requires authentication, even for sending to
local domains, and this is probably not what you want.

With this option SMTP authentication is *REQUIRED* to send any mail to the
server. This is not the option you want, since it will deny other servers to
connect to yours and deliver mails to local users. If you enable this option
its sort of like locking the mail man out of your apartment building, noone
can get their mail because the mailman does not have a key and cannot get in
to deliver your mail.

You need to understand that what you want to restict is being on open relay,
that is spammers can connect to your server and send massive amounts of spam
to users on other servers. Spammers will always be able to connect directly
to your server and send spam mails directly to the users on your server,
since that is the only way possible to handle mail.

-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
nombre de Multisoft Solution
Enviado el: Wednesday, July 16, 2003 4:19 PM
Para: [EMAIL PROTECTED]
Asunto: [xmail] Re: Open Relay & SPAM



Could you give me the example how to do it in detail?
Cause I want to make sure it safe, otherwise I would get another security
ticket from Spamcop.

Thanks,
Joe


- Original Message -
From: "Andrew Joakimsen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 16, 2003 4:12 PM
Subject: [xmail] Re: Open Relay & SPAM


>
> Why bother with all that? Just use optional SMTP auth + pop3 before smtp
> auth. It works and its just as secure.
>
> -Mensaje original-
> De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> nombre de Multisoft Solution
> Enviado el: Wednesday, July 16, 2003 3:57 PM
> Para: [EMAIL PROTECTED]
> Asunto: [xmail] Re: Open Relay & SPAM
>
>
>
> I couldn't test again & again with abuse.net, so I telnet to
> relay-test.mail-abuse.org
> The all test results are "...relay denied..." when I used
> SMTPRELAY.tab
> "205.xxx.xxx.0" "255.255.255.0"
>
> The SMTP.IPMAP.tab content still same:
> "0.0.0.0" "0.0.0.0" "ALLOW"1
>
> 1. Is it possible if spammer through other computers in my network
(205)
> connect to my testing Linux server?
> We have 2 production mail server, but both of them close relay (for sure).
>
> 2. POP3 / SMTP.IPMAP.tab is restrict certain IP to connect to POP3 / SMTP
> server, right?
> 3. So nothing to do with relay, doesn't it?
>
> 4. If I would like to allow one IP, let say 205.100.10.1 so
> SMTPRELAY.tab
> "205.xxx.xxx.1" "255.255.255.255" ??
>
> Thanks,
> Joe
>
>
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, July 16, 2003 3:03 PM
> Subject: [xmail] Re: Open Relay & SPAM
>
>
> >
> > On Wed, 16 Jul 2003, Multisoft Solution wrote:
> >
> > >
> > > I am pretty new in XMail and I do testing in Linux RedHat 9.1
> > > I got a message from our ISP that SPAMCOP told our XMail testing
server
> has
> > > become spammers server/open relay I guess.
> > > Yesterday I close the open relay through a change at:
> > > SMTPRELAY.tab
> > > "205.xxx.xxx.0" "255.255.255.0"
> > >
> > > and I test using http://abuse.net/relay.html with result: Could not
> connect,
> > > test failed.
> >
> > The above line does not prevent the relay test to be performed. With
such
> > line the relay test will fail. Are you sure you didn't touch
> smtp.ipmap.tab ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> &g

[xmail] Re: Open Relay & SPAM

2003-07-16 Thread Multisoft Solution

Could you give me the example how to do it in detail?
Cause I want to make sure it safe, otherwise I would get another security
ticket from Spamcop.

Thanks,
Joe


- Original Message - 
From: "Andrew Joakimsen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 16, 2003 4:12 PM
Subject: [xmail] Re: Open Relay & SPAM


>
> Why bother with all that? Just use optional SMTP auth + pop3 before smtp
> auth. It works and its just as secure.
>
> -Mensaje original-
> De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> nombre de Multisoft Solution
> Enviado el: Wednesday, July 16, 2003 3:57 PM
> Para: [EMAIL PROTECTED]
> Asunto: [xmail] Re: Open Relay & SPAM
>
>
>
> I couldn't test again & again with abuse.net, so I telnet to
> relay-test.mail-abuse.org
> The all test results are "...relay denied..." when I used
> SMTPRELAY.tab
> "205.xxx.xxx.0" "255.255.255.0"
>
> The SMTP.IPMAP.tab content still same:
> "0.0.0.0" "0.0.0.0" "ALLOW"1
>
> 1. Is it possible if spammer through other computers in my network
(205)
> connect to my testing Linux server?
> We have 2 production mail server, but both of them close relay (for sure).
>
> 2. POP3 / SMTP.IPMAP.tab is restrict certain IP to connect to POP3 / SMTP
> server, right?
> 3. So nothing to do with relay, doesn't it?
>
> 4. If I would like to allow one IP, let say 205.100.10.1 so
> SMTPRELAY.tab
> "205.xxx.xxx.1" "255.255.255.255" ??
>
> Thanks,
> Joe
>
>
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, July 16, 2003 3:03 PM
> Subject: [xmail] Re: Open Relay & SPAM
>
>
> >
> > On Wed, 16 Jul 2003, Multisoft Solution wrote:
> >
> > >
> > > I am pretty new in XMail and I do testing in Linux RedHat 9.1
> > > I got a message from our ISP that SPAMCOP told our XMail testing
server
> has
> > > become spammers server/open relay I guess.
> > > Yesterday I close the open relay through a change at:
> > > SMTPRELAY.tab
> > > "205.xxx.xxx.0" "255.255.255.0"
> > >
> > > and I test using http://abuse.net/relay.html with result: Could not
> connect,
> > > test failed.
> >
> > The above line does not prevent the relay test to be performed. With
such
> > line the relay test will fail. Are you sure you didn't touch
> smtp.ipmap.tab ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
> >
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay & SPAM

2003-07-16 Thread Andrew Joakimsen

Why bother with all that? Just use optional SMTP auth + pop3 before smtp
auth. It works and its just as secure.

-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
nombre de Multisoft Solution
Enviado el: Wednesday, July 16, 2003 3:57 PM
Para: [EMAIL PROTECTED]
Asunto: [xmail] Re: Open Relay & SPAM



I couldn't test again & again with abuse.net, so I telnet to
relay-test.mail-abuse.org
The all test results are "...relay denied..." when I used
SMTPRELAY.tab
"205.xxx.xxx.0" "255.255.255.0"

The SMTP.IPMAP.tab content still same:
"0.0.0.0" "0.0.0.0" "ALLOW"1

1. Is it possible if spammer through other computers in my network (205)
connect to my testing Linux server?
We have 2 production mail server, but both of them close relay (for sure).

2. POP3 / SMTP.IPMAP.tab is restrict certain IP to connect to POP3 / SMTP
server, right?
3. So nothing to do with relay, doesn't it?

4. If I would like to allow one IP, let say 205.100.10.1 so
SMTPRELAY.tab
"205.xxx.xxx.1" "255.255.255.255" ??

Thanks,
Joe


- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 16, 2003 3:03 PM
Subject: [xmail] Re: Open Relay & SPAM


>
> On Wed, 16 Jul 2003, Multisoft Solution wrote:
>
> >
> > I am pretty new in XMail and I do testing in Linux RedHat 9.1
> > I got a message from our ISP that SPAMCOP told our XMail testing server
has
> > become spammers server/open relay I guess.
> > Yesterday I close the open relay through a change at:
> > SMTPRELAY.tab
> > "205.xxx.xxx.0" "255.255.255.0"
> >
> > and I test using http://abuse.net/relay.html with result: Could not
connect,
> > test failed.
>
> The above line does not prevent the relay test to be performed. With such
> line the relay test will fail. Are you sure you didn't touch
smtp.ipmap.tab ?
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay & SPAM

2003-07-16 Thread Multisoft Solution

I couldn't test again & again with abuse.net, so I telnet to
relay-test.mail-abuse.org
The all test results are "...relay denied..." when I used
SMTPRELAY.tab
"205.xxx.xxx.0" "255.255.255.0"

The SMTP.IPMAP.tab content still same:
"0.0.0.0" "0.0.0.0" "ALLOW"1

1. Is it possible if spammer through other computers in my network (205)
connect to my testing Linux server?
We have 2 production mail server, but both of them close relay (for sure).

2. POP3 / SMTP.IPMAP.tab is restrict certain IP to connect to POP3 / SMTP
server, right?
3. So nothing to do with relay, doesn't it?

4. If I would like to allow one IP, let say 205.100.10.1 so
SMTPRELAY.tab
"205.xxx.xxx.1" "255.255.255.255" ??

Thanks,
Joe


- Original Message - 
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 16, 2003 3:03 PM
Subject: [xmail] Re: Open Relay & SPAM


>
> On Wed, 16 Jul 2003, Multisoft Solution wrote:
>
> >
> > I am pretty new in XMail and I do testing in Linux RedHat 9.1
> > I got a message from our ISP that SPAMCOP told our XMail testing server
has
> > become spammers server/open relay I guess.
> > Yesterday I close the open relay through a change at:
> > SMTPRELAY.tab
> > "205.xxx.xxx.0" "255.255.255.0"
> >
> > and I test using http://abuse.net/relay.html with result: Could not
connect,
> > test failed.
>
> The above line does not prevent the relay test to be performed. With such
> line the relay test will fail. Are you sure you didn't touch
smtp.ipmap.tab ?
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay & SPAM

2003-07-16 Thread Davide Libenzi

On Wed, 16 Jul 2003, Multisoft Solution wrote:

>
> I am pretty new in XMail and I do testing in Linux RedHat 9.1
> I got a message from our ISP that SPAMCOP told our XMail testing server has
> become spammers server/open relay I guess.
> Yesterday I close the open relay through a change at:
> SMTPRELAY.tab
> "205.xxx.xxx.0" "255.255.255.0"
>
> and I test using http://abuse.net/relay.html with result: Could not connect,
> test failed.

The above line does not prevent the relay test to be performed. With such
line the relay test will fail. Are you sure you didn't touch smtp.ipmap.tab ?



- Davide

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

Yeah Steven, when I originally first "did up" the xmail server, I had not
cleared out the smtprelay.tab, but then I cleared it out, so chances are I
probably got into those list during that time.  I should be ok now, with
your guys' help.

Thanks!

Benny
- Original Message -
From: "Steven Peck" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:51 PM
Subject: [xmail] Re: open relay


>
>
>
> > -Original Message-
> > From: Davide Libenzi [mailto:[EMAIL PROTECTED]
> >=20
> > On Tue, 4 Mar 2003, Steven Peck wrote:
> >=20
> > >
> > > That IP Address is listed in two open relay databases.
> > > http://www.dnsstuff.com/tools/ip4r.ch?ip=3D24.94.213.208
> >=20
> > It does not look like that to me. The form result clean. And=20
> > even so, if
> > the guy did change the configuration lately, maps usually=20
> > takes time to
> > refresh. A time that might be infinite if you do not manually=20
> > trigger an
> > update.
> >=20
> It's entirely posible that they server is not an open relay, but the IP
> address is still (rightly or wrongly) listed in two databases.  Once he
> clears up the configuration issue, he can go through what ever process =
> he
> needs to to get off the lists.
>
> I couldn't get an SMTP header when I tried to do a manual relay test.  =
> The
> connection just timed out and closed.
>
> I meant to have more information in my first post but got distracted and =
> hit
> send accidently :/
>
> -sp
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Steven Peck



> -Original Message-
> From: Davide Libenzi [mailto:[EMAIL PROTECTED]
>=20
> On Tue, 4 Mar 2003, Steven Peck wrote:
>=20
> >
> > That IP Address is listed in two open relay databases.
> > http://www.dnsstuff.com/tools/ip4r.ch?ip=3D24.94.213.208
>=20
> It does not look like that to me. The form result clean. And=20
> even so, if
> the guy did change the configuration lately, maps usually=20
> takes time to
> refresh. A time that might be infinite if you do not manually=20
> trigger an
> update.
>=20
It's entirely posible that they server is not an open relay, but the IP
address is still (rightly or wrongly) listed in two databases.  Once he
clears up the configuration issue, he can go through what ever process =
he
needs to to get off the lists.

I couldn't get an SMTP header when I tried to do a manual relay test.  =
The
connection just timed out and closed.

I meant to have more information in my first post but got distracted and =
hit
send accidently :/

-sp
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

Alright thanks everyone for seeing my dumb mistakes :) And thanks for the
clarification on that Seth.

 I appreciate the help.

benny

- Original Message -
From: "Seth A. Munroe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:38 PM
Subject: [xmail] Re: open relay


>
> Well what's really happening is this:
> when you have:
> "EnableAuthSMTP-POP3""1"
> then smtp opens for a brief period whenever the pop is logged into (i seem
> to remember .9 seconds being the default - 9 tenths of a second).
>
> when you have:
> "EnableAuthSMTP-POP3""0"
> smtp is never opened and must always be authenticated (unless the ip is in
> your smtprelay.tab file)
>
> -Seth
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Benny
> Sent: Tuesday, March 04, 2003 3:24 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: open relay
>
>
>
> You are right Seth,  and of course that makes sense.  But am I correct in
> having:
>
> "EnableAuthSMTP-POP3""0"
>
> or should it be
>
> "EnableAuthSMTP-POP3""1"
>
> because if it is set to 1, then my client doesn't have to authenticate,
but
> if at 0, then it does.  And I want it to do smtp-auth.
>
> benny
>
> - Original Message -
> From: "Seth A. Munroe" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 5:22 PM
> Subject: [xmail] Re: open relay
>
>
> >
> > When you perform the test, you have to tell the test email to send to an
> > email address that is NOT handled by the server you are testing.
> >
> > If you register at abuse.net, there is a check box i think to have them
> > generate an email address to use for the test. it will still send the
> > results to the address you specify.
> >
> > The reason the server looked like an open relay is that it accepted the
> test
> > mail, but it accepted the test mail because it was addressed to a domain
> > handled by the server.
> >
> > -Seth
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Benny
> > Sent: Tuesday, March 04, 2003 3:11 PM
> > To: [EMAIL PROTECTED]
> > Subject: [xmail] Re: open relay
> >
> >
> >
> > Here is the email I get from the test site http://abuse.net
> >
>
> --
> --
> > -
> > This is a test of third-party mail relay, generated via the
> > Network Abuse Clearinghouse at http://www.abuse.net.
> >
> > Target host = thedaily.tv [24.94.213.208]
> > Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
> >
> > A well-configured mail server should NOT relay third-party email.
> > Otherwise, the server is subject to abuse by vandals and spammers,
> > and probable blacklisting by recipients of the unwanted third-party
> > e-mail.
> >
> > For information on how to secure a mail server against third-party
> > relay, visit http://www.mail-abuse.org/tsi/>.
>
> --
> --
> > --
> >
> > benny
> >
> > - Original Message -
> > From: "Davide Libenzi" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, March 04, 2003 5:10 PM
> > Subject: [xmail] Re: open relay
> >
> >
> > >
> > > On Tue, 4 Mar 2003, Benny wrote:
> > >
> > > > Ok,
> > > >
> > > > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > > > "0" in server.tab.  I set my mail client for smtp auth and
everything
> > > > works, and if I dont have smtp auth set it doesn't work(i get an
auth
> > > > error).  So in that aspect everything works, but how come when I do
an
> > > > open relay test, my server acts like an open relay and sends through
> the
> > > > email?  I have tried several online open relay tests and all seem to
> > > > show my server as open relay.
> > >
> > > If your hipotesis are true, I strongly doubt about it. Is your server
> > > public on the net ? Which test did you use ?
> > >
> > >
> > >
> > > - Davide
> > >
> > > -
> > > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > > the body of a mes

[xmail] Re: open relay

2003-03-04 Thread Andrew Joakimsen

0 is the correct setting. Notice how on the relay test it says:

>>> RCPT TO:<[EMAIL PROTECTED]>

The server should always accept messages for your domain! Relay meaning that
the server accepts messages that should arrive at a server other than your
own. The only case you want that to happen is if your users need to send
email via SMTP from your server, in which case they use their password

EnableAuthSMTP-POP3 means that if they checked mail with POP3 there is a
window of time where they can send messages (based on IP?) withouth having
to auth.

-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
nombre de Benny
Enviado el: Tuesday, March 04, 2003 6:24 PM
Para: [EMAIL PROTECTED]
Asunto: [xmail] Re: open relay



You are right Seth,  and of course that makes sense.  But am I correct in
having:

"EnableAuthSMTP-POP3""0"

or should it be

"EnableAuthSMTP-POP3""1"

because if it is set to 1, then my client doesn't have to authenticate, but
if at 0, then it does.  And I want it to do smtp-auth.

benny

- Original Message -
From: "Seth A. Munroe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:22 PM
Subject: [xmail] Re: open relay


>
> When you perform the test, you have to tell the test email to send to an
> email address that is NOT handled by the server you are testing.
>
> If you register at abuse.net, there is a check box i think to have them
> generate an email address to use for the test. it will still send the
> results to the address you specify.
>
> The reason the server looked like an open relay is that it accepted the
test
> mail, but it accepted the test mail because it was addressed to a domain
> handled by the server.
>
> -Seth
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Benny
> Sent: Tuesday, March 04, 2003 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: open relay
>
>
>
> Here is the email I get from the test site http://abuse.net
>
> --
--
> -
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>
> Target host = thedaily.tv [24.94.213.208]
> Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
>
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>
> For information on how to secure a mail server against third-party
> relay, visit http://www.mail-abuse.org/tsi/>.
> --------------
--
> --
>
> benny
>
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 5:10 PM
> Subject: [xmail] Re: open relay
>
>
> >
> > On Tue, 4 Mar 2003, Benny wrote:
> >
> > > Ok,
> > >
> > > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > > "0" in server.tab.  I set my mail client for smtp auth and everything
> > > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > > error).  So in that aspect everything works, but how come when I do an
> > > open relay test, my server acts like an open relay and sends through
the
> > > email?  I have tried several online open relay tests and all seem to
> > > show my server as open relay.
> >
> > If your hipotesis are true, I strongly doubt about it. Is your server
> > public on the net ? Which test did you use ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Seth A. Munroe

Well what's really happening is this:
when you have:
"EnableAuthSMTP-POP3""1"
then smtp opens for a brief period whenever the pop is logged into (i seem
to remember .9 seconds being the default - 9 tenths of a second).

when you have:
"EnableAuthSMTP-POP3""0"
smtp is never opened and must always be authenticated (unless the ip is in
your smtprelay.tab file)

-Seth

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Benny
Sent: Tuesday, March 04, 2003 3:24 PM
To: [EMAIL PROTECTED]
Subject: [xmail] Re: open relay



You are right Seth,  and of course that makes sense.  But am I correct in
having:

"EnableAuthSMTP-POP3""0"

or should it be

"EnableAuthSMTP-POP3""1"

because if it is set to 1, then my client doesn't have to authenticate, but
if at 0, then it does.  And I want it to do smtp-auth.

benny

- Original Message -
From: "Seth A. Munroe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:22 PM
Subject: [xmail] Re: open relay


>
> When you perform the test, you have to tell the test email to send to an
> email address that is NOT handled by the server you are testing.
>
> If you register at abuse.net, there is a check box i think to have them
> generate an email address to use for the test. it will still send the
> results to the address you specify.
>
> The reason the server looked like an open relay is that it accepted the
test
> mail, but it accepted the test mail because it was addressed to a domain
> handled by the server.
>
> -Seth
>
> -Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Benny
> Sent: Tuesday, March 04, 2003 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: open relay
>
>
>
> Here is the email I get from the test site http://abuse.net
>
> --
--
> -
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>
> Target host = thedaily.tv [24.94.213.208]
> Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
>
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>
> For information on how to secure a mail server against third-party
> relay, visit http://www.mail-abuse.org/tsi/>.
> ----------
--
> --
>
> benny
>
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 5:10 PM
> Subject: [xmail] Re: open relay
>
>
> >
> > On Tue, 4 Mar 2003, Benny wrote:
> >
> > > Ok,
> > >
> > > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > > "0" in server.tab.  I set my mail client for smtp auth and everything
> > > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > > error).  So in that aspect everything works, but how come when I do an
> > > open relay test, my server acts like an open relay and sends through
the
> > > email?  I have tried several online open relay tests and all seem to
> > > show my server as open relay.
> >
> > If your hipotesis are true, I strongly doubt about it. Is your server
> > public on the net ? Which test did you use ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

You are right Seth,  and of course that makes sense.  But am I correct in
having:

"EnableAuthSMTP-POP3""0"

or should it be

"EnableAuthSMTP-POP3""1"

because if it is set to 1, then my client doesn't have to authenticate, but
if at 0, then it does.  And I want it to do smtp-auth.

benny

- Original Message -
From: "Seth A. Munroe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:22 PM
Subject: [xmail] Re: open relay


>
> When you perform the test, you have to tell the test email to send to an
> email address that is NOT handled by the server you are testing.
>
> If you register at abuse.net, there is a check box i think to have them
> generate an email address to use for the test. it will still send the
> results to the address you specify.
>
> The reason the server looked like an open relay is that it accepted the
test
> mail, but it accepted the test mail because it was addressed to a domain
> handled by the server.
>
> -Seth
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Benny
> Sent: Tuesday, March 04, 2003 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: open relay
>
>
>
> Here is the email I get from the test site http://abuse.net
>
> --
--
> -
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>
> Target host = thedaily.tv [24.94.213.208]
> Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
>
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>
> For information on how to secure a mail server against third-party
> relay, visit http://www.mail-abuse.org/tsi/>.
> ----------
--
> --
>
> benny
>
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 5:10 PM
> Subject: [xmail] Re: open relay
>
>
> >
> > On Tue, 4 Mar 2003, Benny wrote:
> >
> > > Ok,
> > >
> > > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > > "0" in server.tab.  I set my mail client for smtp auth and everything
> > > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > > error).  So in that aspect everything works, but how come when I do an
> > > open relay test, my server acts like an open relay and sends through
the
> > > email?  I have tried several online open relay tests and all seem to
> > > show my server as open relay.
> >
> > If your hipotesis are true, I strongly doubt about it. Is your server
> > public on the net ? Which test did you use ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

No, the email is a result of the test below from http://abuse.net.
---
Mail relay testing
Mail relay testing
Connecting to thedaily.tv for registered user test ...
<<< 220 <[EMAIL PROTECTED]> [XMail 1.12 (Linux/Ix86) ESMTP
Server]
service ready; Tue, 04 Mar 2003 17:13:00 -0600
>>> HELO www.abuse.net
<<< 250 thedaily.tv


Relay test 1
>>> RSET
<<< 250 OK
>>> MAIL FROM:<[EMAIL PROTECTED]>
<<< 250 OK
>>> RCPT TO:<[EMAIL PROTECTED]>
<<< 250 OK
>>> DATA
<<< 354 Start mail input; end with .
>>> (message body)
<<< 250 OK 

Relay test result
Hmmn, at first glance, host appeared to accept a message for relay.
THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY.
Some systems appear to accept relay mail, but then reject messages
internally
rather than delivering them, but you cannot tell at this point whether the
message will be relayed or not.
If it is really an open relay, the test message will be delivered to you. If
you
do not receive the test message in your e-mail in the next few hours, it IS
NOT
an open relay.

---

So it shows it as being an open relay.



benny



- Original Message -----
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:26 PM
Subject: [xmail] Re: open relay


>
> On Tue, 4 Mar 2003, Benny wrote:
>
> >
> > Here is the email I get from the test site http://abuse.net
> >
>
> --
--
> > -
> > This is a test of third-party mail relay, generated via the
> > Network Abuse Clearinghouse at http://www.abuse.net.
> >
> > Target host = thedaily.tv [24.94.213.208]
> > Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
> >
> > A well-configured mail server should NOT relay third-party email.
> > Otherwise, the server is subject to abuse by vandals and spammers,
> > and probable blacklisting by recipients of the unwanted third-party
> > e-mail.
> >
> > For information on how to secure a mail server against third-party
> > relay, visit http://www.mail-abuse.org/tsi/>.
>
> --
--
> > --
>
> So ? Your IP is not an open relay.
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Seth A. Munroe

When you perform the test, you have to tell the test email to send to an
email address that is NOT handled by the server you are testing.

If you register at abuse.net, there is a check box i think to have them
generate an email address to use for the test. it will still send the
results to the address you specify.

The reason the server looked like an open relay is that it accepted the test
mail, but it accepted the test mail because it was addressed to a domain
handled by the server.

-Seth

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Benny
Sent: Tuesday, March 04, 2003 3:11 PM
To: [EMAIL PROTECTED]
Subject: [xmail] Re: open relay



Here is the email I get from the test site http://abuse.net


-
This is a test of third-party mail relay, generated via the
Network Abuse Clearinghouse at http://www.abuse.net.

Target host = thedaily.tv [24.94.213.208]
Test performed by <[EMAIL PROTECTED]> from 24.94.213.208

A well-configured mail server should NOT relay third-party email.
Otherwise, the server is subject to abuse by vandals and spammers,
and probable blacklisting by recipients of the unwanted third-party
e-mail.

For information on how to secure a mail server against third-party
relay, visit http://www.mail-abuse.org/tsi/>.

--

benny

- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:10 PM
Subject: [xmail] Re: open relay


>
> On Tue, 4 Mar 2003, Benny wrote:
>
> > Ok,
> >
> > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > "0" in server.tab.  I set my mail client for smtp auth and everything
> > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > error).  So in that aspect everything works, but how come when I do an
> > open relay test, my server acts like an open relay and sends through the
> > email?  I have tried several online open relay tests and all seem to
> > show my server as open relay.
>
> If your hipotesis are true, I strongly doubt about it. Is your server
> public on the net ? Which test did you use ?
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Steven Peck

That IP Address is listed in two open relay databases.
http://www.dnsstuff.com/tools/ip4r.ch?ip=3D24.94.213.208



> -Original Message-
> From: Benny [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, March 04, 2003 3:11 PM
> To: [EMAIL PROTECTED]
> Subject: [xmail] Re: open relay
>=20
>=20
>=20
> Here is the email I get from the test site http://abuse.net
>=20
> --
> --
> -
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>=20
> Target host =3D thedaily.tv [24.94.213.208]
> Test performed by <[EMAIL PROTECTED]> from 24.94.213.208
>=20
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>=20
> For information on how to secure a mail server against third-party
> relay, visit http://www.mail-abuse.org/tsi/>.
> --
> --
> --
>=20
> benny
>=20
> - Original Message -
> From: "Davide Libenzi" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 5:10 PM
> Subject: [xmail] Re: open relay
>=20
>=20
> >
> > On Tue, 4 Mar 2003, Benny wrote:
> >
> > > Ok,
> > >
> > > I have my smtprelay.tab file blank, and I have=20
> "EnableAuthSMTP-POP3"
> > > "0" in server.tab.  I set my mail client for smtp auth=20
> and everything
> > > works, and if I dont have smtp auth set it doesn't work(i=20
> get an auth
> > > error).  So in that aspect everything works, but how come=20
> when I do an
> > > open relay test, my server acts like an open relay and=20
> sends through the
> > > email?  I have tried several online open relay tests and=20
> all seem to
> > > show my server as open relay.
> >
> > If your hipotesis are true, I strongly doubt about it. Is=20
> your server
> > public on the net ? Which test did you use ?
> >
> >
> >
> > - Davide
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
>=20
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>=20
>=20
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

Here is the email I get from the test site http://abuse.net


-
This is a test of third-party mail relay, generated via the
Network Abuse Clearinghouse at http://www.abuse.net.

Target host = thedaily.tv [24.94.213.208]
Test performed by <[EMAIL PROTECTED]> from 24.94.213.208

A well-configured mail server should NOT relay third-party email.
Otherwise, the server is subject to abuse by vandals and spammers,
and probable blacklisting by recipients of the unwanted third-party
e-mail.

For information on how to secure a mail server against third-party
relay, visit http://www.mail-abuse.org/tsi/>.

--

benny

- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:10 PM
Subject: [xmail] Re: open relay


>
> On Tue, 4 Mar 2003, Benny wrote:
>
> > Ok,
> >
> > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > "0" in server.tab.  I set my mail client for smtp auth and everything
> > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > error).  So in that aspect everything works, but how come when I do an
> > open relay test, my server acts like an open relay and sends through the
> > email?  I have tried several online open relay tests and all seem to
> > show my server as open relay.
>
> If your hipotesis are true, I strongly doubt about it. Is your server
> public on the net ? Which test did you use ?
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

I have used the test sites below:

http://abuse.net/relay.html
http://members.iinet.net.au/~remmie/relay/
http://www.paladincorp.com.au/unix/spam/spamlart/

Those are just some I tested.  And the last one comes back with several
errors and it looks like my server is not an open relay, but the other tests
come back as open relay.

benny
- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:10 PM
Subject: [xmail] Re: open relay


>
> On Tue, 4 Mar 2003, Benny wrote:
>
> > Ok,
> >
> > I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> > "0" in server.tab.  I set my mail client for smtp auth and everything
> > works, and if I dont have smtp auth set it doesn't work(i get an auth
> > error).  So in that aspect everything works, but how come when I do an
> > open relay test, my server acts like an open relay and sends through the
> > email?  I have tried several online open relay tests and all seem to
> > show my server as open relay.
>
> If your hipotesis are true, I strongly doubt about it. Is your server
> public on the net ? Which test did you use ?
>
>
>
> - Davide
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Benny

Yeah I thought and tried that too... But then it doesnt care if my client
even does smtp-auth.  In fact I have turned off smtp-auth on my client(OE)
and I set :

"EnableAuthSMTP-POP3""1"

And this message will go through without smtp-auth.

benny
- Original Message -
From: "Gustavo Galvan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 5:00 PM
Subject: [xmail] Re: open relay


>
> You have:
> "EnableAuthSMTP-POP3"   "0"
>  and must be:
> "EnableAuthSMTP-POP3"   "1"
>
>
> Gustavo
>
>
> - Original Message -
> From: "Benny" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, March 04, 2003 7:52 PM
> Subject: [xmail] open relay
>
>
> > Ok,
> >
> >   I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
> "0" in server.tab.  I set my mail client for smtp auth and everything
works,
> and if I dont have smtp auth set it doesn't work(i get an auth error).  So
> in that aspect everything works, but how come when I do an open relay
test,
> my server acts like an open relay and sends through the email?  I have
tried
> several online open relay tests and all seem to show my server as open
> relay.
> >
> > benny
> > -
> > To unsubscribe from this list: send the line "unsubscribe xmail" in
> > the body of a message to [EMAIL PROTECTED]
> > For general help: send the line "help" in the body of a message to
> > [EMAIL PROTECTED]
> >
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.459 / Virus Database: 258 - Release Date: 25/02/2003
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: open relay

2003-03-04 Thread Gustavo Galvan

You have:
"EnableAuthSMTP-POP3"   "0"
 and must be:
"EnableAuthSMTP-POP3"   "1"


Gustavo


- Original Message -
From: "Benny" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 04, 2003 7:52 PM
Subject: [xmail] open relay


> Ok,
>
>   I have my smtprelay.tab file blank, and I have "EnableAuthSMTP-POP3"
"0" in server.tab.  I set my mail client for smtp auth and everything works,
and if I dont have smtp auth set it doesn't work(i get an auth error).  So
in that aspect everything works, but how come when I do an open relay test,
my server acts like an open relay and sends through the email?  I have tried
several online open relay tests and all seem to show my server as open
relay.
>
> benny
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.459 / Virus Database: 258 - Release Date: 25/02/2003

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]



[xmail] Re: Open Relay question

2002-11-05 Thread Scott


- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 05, 2002 10:29 AM
Subject: [xmail] Re: Open Relay question


>
> On Tue, 5 Nov 2002, Scott wrote:
>
> >
> > Hi,
> >   ver1.10 on Linux.
> > set the smtprelay.tab to "0.0.0.0""0.0.0.0" -needed fro external
users
> > with dynamic ip
> > and the server.tab "enableauthsmpth-pop3" to "1"
> >
> > but allows relaying from non user accounts as my logs will account to :
(
>
> An smtprelay.tab with :
>
> "0.0.0.0""0.0.0.0"
>
> is an open door. You have to remove it and use SMTP auth.
>
>
>

My bad...
"assumed" that they need to be used in conjunction.
Thanks !

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay?

2002-06-10 Thread Lee Rich


The server was set up using the configuration files. And once everything seemed in 
order, the system went live. It would seem there was an error within the relaying 
settings. But all has now be sorted. (Additional thanks to Bill Healy)! ;)

-Original Message-
From: Davide Libenzi <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Sent: 07/06/2002 17:23
Subject: [xmail] Re: Open Relay?


On Fri, 7 Jun 2002, Lee Rich wrote:

> Hi all, I hope someone can help..
> Over the past few days our XMail system (running on linux) has been receiving 
>thousands (I deleted 31,000 yesterday) emails addressed to unknown users. Below is a 
>sample from one of the emails that ended up in the admin mailbox. Do these messages 
>mean that the mail server will not relay for others, or do they mean that the server 
>will relay, but cannot send to these addresses for 'X' reason?
> Our XMail server is intended only to be used as a recieving mail server. That is, it 
>accepts incoming email for our domain (and it's four aliases) but nothing else. It 
>then stores these mails in the respective maildir's and allows collection via pop3 by 
>our OfficeTalk server (which then distributes the emails to the users). The server 
>should also be permitted to send bounce messages back to people informing them of any 
>problems with the delivery of their email. (If they tried to send to an invalid user 
>on one of our domains.)
> Now, I know I've been going on and on about the same point in several messages to 
>this mail list. But I just can't get this thing to bed-down. Please can someone help 
>me here, I'm getting closer to the end of my rope ;)

how did you configure your server ?
why is XMail accepting messages from unknown users ?



- Davide


-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-11 Thread Jan Patorra

hi there,

> > I had a few users complain that they were not getting emails, so after
> > some research it turned out that people were getting a "551 Server
> > denied do to IP restriction" error, however I noticed that I (as the
> > admin) was not getting an error email messages (the server.tab setting
> > ErrorsAdmin), so I was wondering which errors are sent to that email
> > address?
>
> If you set one of the IP spam protections the message does _not_ even
> enter the system, and you can easily understand how good this behavior is.
> Where you find this info is the SMTP log file(s) that a postmaster should
> costantly check through automatic scripts.

do you have any scripts ready ?

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-10 Thread Scott Dale Robison

Right, I knew some were indexed and some not, so I figured I'd take the safe
route and restart while I was playing with the smtp settings. I use CtrlClnt
all the time for domain, user & alias maintenance though.

SDR

- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: "XMail mailing list" <[EMAIL PROTECTED]>
Sent: Monday, December 10, 2001 09:34 PM
Subject: [xmail] Re: Open Relay


> On Mon, 10 Dec 2001, Scott Dale Robison wrote:
>
> > I was testing by creating an alternate account in my client (but not on
the
> > server... [EMAIL PROTECTED]) and I tried to email a message from
[EMAIL PROTECTED]
> > to my hotmail account via my server. It kept working for quite some
time, so
> > either I didn't stop/start xmail (which I'm sure I did in fact do) or it
was
> > caching smtp after pop3 authentication info (which I suspect more, but
care
> > not at this point becaue it *works*). 
>
> When you change .tab files you do _not_ need to restart the server.
> Be warned that some .tab files ( tabindex ones ) cannot be modified while
> the server is running.
> The use of CtrlClnt or other tools that use the CTRL protocol is strongly
> suggested to administer the server.
>
>
>
>
> - Davide
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-10 Thread Scott Dale Robison

I was testing by creating an alternate account in my client (but not on the
server... [EMAIL PROTECTED]) and I tried to email a message from [EMAIL PROTECTED]
to my hotmail account via my server. It kept working for quite some time, so
either I didn't stop/start xmail (which I'm sure I did in fact do) or it was
caching smtp after pop3 authentication info (which I suspect more, but care
not at this point becaue it *works*). 

Thanks for the attempt to help though, it is appreciated.

Scott Dale Robison
[EMAIL PROTECTED]

- Original Message -
From: "Bill Healy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 10, 2001 08:48 PM
Subject: [xmail] Re: Open Relay


> How are you testing it for relay?
>
> Bill
>
> >--
> >From: Scott Dale Robison[SMTP:[EMAIL PROTECTED]]
> >Sent: Monday, December 10, 2001 1:59 PM
> >To: [EMAIL PROTECTED]
> >Subject: [xmail] Re: Open Relay
> >
> >> > I'm sure this has been asked many times, but I'm not following how to
> >setup Xmail to restrict relaying. I have my smtprelay.tab file setup as
> >follows:
> >> >
> >> > "127.0.0.1" "255.255.255.255"
> >> >
> >> > Applicable server.tab variables are:
> >> >
> >> > "EnableAuthSMTP-POP3"   "0"
> >> > "DefaultSmtpPerms"  ""
> >> >
> >> > Even with this setup, full relaying is still possible.
> >> >
> >> > I've read that I need to setup smtp authentication, but not via
> >mail-auth... What does this mean? I don't want to have to maintain two
> >separate lists of authentication information, yet that's the only
> >information I can find. Any pointers would be appreciated.
> >>
> >> With a smtprelay.tab that contain _only_ :
> >>
> >> "127.0.0.1" "255.255.255.255"
> >>
> >> relay will be blocked.
> >
> >Fascinating. What else might affect that, as my server (at
204.228.135.153)
> >appears to support full relaying still (even with that setting)?
> >
> >SDR
> >
> >-
> >To unsubscribe from this list: send the line "unsubscribe xmail" in
> >the body of a message to [EMAIL PROTECTED]
> >For general help: send the line "help" in the body of a message to
> >[EMAIL PROTECTED]
> >
> >
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-10 Thread Bill Healy

How are you testing it for relay?

Bill

>--
>From:  Scott Dale Robison[SMTP:[EMAIL PROTECTED]]
>Sent:  Monday, December 10, 2001 1:59 PM
>To:[EMAIL PROTECTED]
>Subject:       [xmail] Re: Open Relay
>
>> > I'm sure this has been asked many times, but I'm not following how to
>setup Xmail to restrict relaying. I have my smtprelay.tab file setup as
>follows:
>> >
>> > "127.0.0.1" "255.255.255.255"
>> >
>> > Applicable server.tab variables are:
>> >
>> > "EnableAuthSMTP-POP3"   "0"
>> > "DefaultSmtpPerms"  ""
>> >
>> > Even with this setup, full relaying is still possible.
>> >
>> > I've read that I need to setup smtp authentication, but not via
>mail-auth... What does this mean? I don't want to have to maintain two
>separate lists of authentication information, yet that's the only
>information I can find. Any pointers would be appreciated.
>>
>> With a smtprelay.tab that contain _only_ :
>>
>> "127.0.0.1" "255.255.255.255"
>>
>> relay will be blocked.
>
>Fascinating. What else might affect that, as my server (at 204.228.135.153)
>appears to support full relaying still (even with that setting)?
>
>SDR
>
>-
>To unsubscribe from this list: send the line "unsubscribe xmail" in
>the body of a message to [EMAIL PROTECTED]
>For general help: send the line "help" in the body of a message to
>[EMAIL PROTECTED]
>
>
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-10 Thread Scott Dale Robison

BAH! Ok, I've got it figured out now. For handy reference for other people:

1) Setup smtprelay.tab to be empty (or include only those IP addresses you
need to allow, such as your local subnet).
2) Do not set SmtpConfig to mail-auth (leave it blank)
3) Set DefaultSmtpPerms to at least "MR"
4) THERE IS NOTHING ELSE TO DO!!!

Step 4 is where I kept going wrong. I presumed that when the documentation
referenced setting up Smtp Authentication, there was something in *Xmail*
itself to configure. It's only the client. If a client authenticates, it
will get the permissions automatically, nothing else to do. My bad.

Thanks for all your help Davide, and in making such an excellent program
available to the world.

Scott Dale Robison
[EMAIL PROTECTED]

- Original Message -
From: "Davide Libenzi" <[EMAIL PROTECTED]>
To: "XMail mailing list" <[EMAIL PROTECTED]>
Sent: Monday, December 10, 2001 02:55 PM
Subject: [xmail] Re: Open Relay


> On Mon, 10 Dec 2001, Scott Dale Robison wrote:
>
> >
> > I'm sure this has been asked many times, but I'm not following how to
setup Xmail to restrict relaying. I have my smtprelay.tab file setup as
follows:
> >
> > "127.0.0.1" "255.255.255.255"
> >
> > Applicable server.tab variables are:
> >
> > "EnableAuthSMTP-POP3"   "0"
> > "DefaultSmtpPerms"  ""
> >
> > Even with this setup, full relaying is still possible.
> >
> > I've read that I need to setup smtp authentication, but not via
mail-auth... What does this mean? I don't want to have to maintain two
separate lists of authentication information, yet that's the only
information I can find. Any pointers would be appreciated.
>
> With a smtprelay.tab that contain _only_ :
>
> "127.0.0.1" "255.255.255.255"
>
> relay will be blocked.
>
>
>
>
> - Davide
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>
>

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]




[xmail] Re: Open Relay

2001-12-10 Thread Scott Dale Robison

> > I'm sure this has been asked many times, but I'm not following how to
setup Xmail to restrict relaying. I have my smtprelay.tab file setup as
follows:
> >
> > "127.0.0.1" "255.255.255.255"
> >
> > Applicable server.tab variables are:
> >
> > "EnableAuthSMTP-POP3"   "0"
> > "DefaultSmtpPerms"  ""
> >
> > Even with this setup, full relaying is still possible.
> >
> > I've read that I need to setup smtp authentication, but not via
mail-auth... What does this mean? I don't want to have to maintain two
separate lists of authentication information, yet that's the only
information I can find. Any pointers would be appreciated.
>
> With a smtprelay.tab that contain _only_ :
>
> "127.0.0.1" "255.255.255.255"
>
> relay will be blocked.

Fascinating. What else might affect that, as my server (at 204.228.135.153)
appears to support full relaying still (even with that setting)?

SDR

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]