Tor-Einar Jarnbjo ha scritto:
Hi!
I didn't notice until I realized that outgoing mails seemed to "hang"
somewhere, but obviously someone has been able to use my James server as
an open relay a few days ago and my outgoing spool repository was filled
up with undeliverable mails. After deleting the mails from the spool
table, the server seem to work fine again now.
If the SMTP server log is correct, someone connected from an untrusted
IP, provoked some errors and then managed to send mails to non-local
addresses without authenticating. The first occurences were logged like
this:
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:52 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character
at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character
at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character
at 8
18/06/08 21:43:56 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:58 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:59 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:59 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:44:00 INFO smtpserver: Successfully spooled mail
Mail1213818240095-91994 from [EMAIL PROTECTED] on 67.88.45.67 for
[<deleted list of non-local addresses>]
Is it somehow possible to find out why James decided to allow this to
happen?
I checked the source code and I didn't see possible issues with the
logged error.
WHy did you deleted the list of non-local addresses from the log? Maybe
its content is useful.
What did you changed in james configuration from the default one?
Stefano
PS: you should upgrade to james 2.3.1
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
