IF you have relay enabled from 127.0.0.1 AND you have a mail server on the same machine AND you have authentication turned on for outside IP addresses, the mail server should still be requiring authentication from outside people trying to use you as an open relay.
I have that setup (webstar) and can see the steady stream of attempted relays being blocked.
You can turn authentication off for your internal and trusted networks, including 127.0.0.1 and the IP address of your witango machine
Authentication required for everyone else
Use your firewall/router not not let in IP spoofers using 127. Or your server’s IP address
Then, when the spammer is sending messages trying to exploit the open relay, the mail server will reject because the IP address is the originating machine or server, not your own. If they are trying to spoof your Ip address, the mail won’t get in.
Check your detailed smtp log and you’ll see where your hole is.
On 11/1/04 10:34 AM, "Rick Sanders" <[EMAIL PROTECTED]> wrote:
I have a client who's having email relay problems.
Basically, people are relaying off his email server. He's turned off relay for local sender addresses, and enabled SMTP authentication.
However, he's had to let his local machine IP 127.0.0.1 for access to the mail server, because WiTango needs to send automatic email. However, because of this, anyone can still relay mail off the server.
The question:
Is it possible for the WiTango server to send a username & password to the mail server for outbound authentication? I know that WiTango can use a specific email address, but can it send a Username & password for authentication?
The server is version 2000 with SP2.
Thanks in advance,
Rick Sanders
________________________________________________________________________
TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
-----------------------------------------
Roland Dumas
Roberts Information Services
310 W. Bellevue Avenue
San Mateo CA 94402
650-347-1373
415-412-9300 (cell)
[EMAIL PROTECTED]
SMS: http://new.servqual.com/html/sms.tml
________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
