Tor-Einar Jarnbjo ha scritto: >> As I said earlier I can't see anything wrong. In general, from 3.2 >> onwards if you have turned SMTP authentication on you can be sure that >> any attempt to send a message to a non-local address will require SMTP >> Authentication. > Obviously, it doesn't. If I send a mail regulary to a remote host from > my own mail client, the SMTP authentication is logged by James: > > 31/10/08 21:28:05 INFO smtpserver: Connection from > ppp-62-216-221-238.dynamic.mnet-online.de (62.216.221.238) > 31/10/08 21:28:05 INFO smtpserver: AUTH method PLAIN succeeded > 31/10/08 21:28:05 INFO smtpserver: Successfully spooled mail > Mail1225484885644-22503 from [EMAIL PROTECTED] on 62.216.221.238 > for [EMAIL PROTECTED] > > The connections causing the spam hickup this week were _not_ > authenticated, or at least James did not log any authentication attempt: > > 27/10/08 13:14:17 INFO smtpserver: Connection from > wvps212-241-x-y.vps.webfusion.co.uk (212.241.x.y) > 27/10/08 13:14:18 INFO smtpserver: Successfully spooled mail > Mail1225109658790-1134809 from [EMAIL PROTECTED] on 212.241.x.y for > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED] > > To me, it looks very much as if James is actually accepting to relay > these messages without authentication, although the config file > indicates that it shouldn't.
Maybe I found an answer to this looking at source code. AuthCmdHandler logs at INFO level the "AUTH method PLAIN succeded" but only at DEBUG level an "AUTH method LOGIN succeded". So maybe your client is using the LOGIN style to auth. You probably want to increase your log level for SMTPServer to DEBUG... I read the RcptCmdHandler code at least 20 times to find an explanation to your issue and I saw no possible bugs there. So either your user is authenticated or he is from an authorized network. Stefano --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
