I thought clearing the smtprelay.tab did that? I was under the impression = that it forced authentication for smtp if the .tab was empty.
I could be wrong though, I'm very new to this. >>> [EMAIL PROTECTED] 02/09/04 11:02AM >>> I'm using xmail for 2 years and the first test that I used was http://www.abuse.net/relay.html in the 1 minute after the installation. All tests results that the server ISN'T an open relay BUT here we are hosting today +- 1500 domains and my problem resides exactly in the: "In normal no relay setup, the only mail that will pass your server is the one to your email address" because anyone in those 1500 domains could send a forged message to others inside my server. I'm looking for a way to force ALL USERS inside my server to authenticate every time they want to use SMTP. Thank you Edinilson --------------------------------------------------------- ATINET-Professional Web Hosting Tel Voz: (0xx11) 4412-0876 http://www.atinet.com.br=20 ----- Original Message -----=20 From: "CLEMENT Francis" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 06, 2004 8:32 AM Subject: [xmail] Re: SMTP Used incorretly Try this test for openrelay (For any body reading this, it is the basic anti-relay test to perform agains a mail server...) >From a pc connected to internet NOT using one of your IPs (ip not in =3D xmail smtprelay.tab), use telnet, connect to you server port 25 and try to =3D send manually a mail from <[EMAIL PROTECTED]> with subject =3D 'Edinilson from telnet' (to help us see your test mail) to : me [EMAIL PROTECTED] (external mail), then another to davide [EMAIL PROTECTED] (external mail) and then one to you (internal =3D mail account). In normal no relay setup, the only mail that will pass your server is =3D the one to your email address. The two others will be rejected with a =3D 'relay not allowed' in the smtp session indicating a good anti-relay setup. Second optionnal test for relay : Open a temporary free hotmail =3D account, then write a mail from this hotmail account (via webmail) to me, you =3D and davide (one at a time) with subject 'Edinilson from temp account' (to =3D help us see your test mail). Here We will see if you server relays mails from hotmail for example Francis > -----Message d'origine----- > De : Edinilson J. Santos [mailto:[EMAIL PROTECTED] > Envoy=3DE9 : jeudi 5 f=3DE9vrier 2004 21:02 > =3DC0 : [EMAIL PROTECTED] > Objet : [xmail] Re: SMTP Used incorretly >=3D20 >=3D20 > I think that my example wasn't so good because in that test=3D20 > he send to me > ([EMAIL PROTECTED]) a message BUT he can send message to any > email/domain -([EMAIL PROTECTED]) for example. >=3D20 > What's wrong? >=3D20 > Thank you >=3D20 > Edinilson > --------------------------------------------------------- > ATINET-Professional Web Hosting > Tel Voz: (0xx11) 4412-0876 > http://www.atinet.com.br=20 >=3D20 >=3D20 > ----- Original Message -----=3D20 > From: "Davide Libenzi" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, February 05, 2004 5:52 PM > Subject: [xmail] Re: SMTP Used incorretly >=3D20 >=3D20 > On Thu, 5 Feb 2004, Edinilson J. Santos wrote: >=3D20 > > Davide, he is sending email THROUGH my SMTP server not TO my =3D server. >=3D20 > The message you posted had a recipient of [EMAIL PROTECTED]:=20 >=3D20 > Received: from administracao (200.158.170.68:1028) > by mailserver with [XMail 1.17 (Win32/Ix86) ESMTP Server] > id <S30DC197> for <[EMAIL PROTECTED]> from > <[EMAIL PROTECTED]>; > Thu, 5 Feb 2004 14:52:43 -0200 >=3D20 >=3D20 > And last time I checked, you are the handler of @atinet.com.br >=3D20 >=3D20 >=3D20 >=3D20 > - Davide >=3D20 >=3D20 >=3D20 > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] >=3D20 >=3D20 >=3D20 >=3D20 > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.577 / Virus Database: 366 - Release Date: 03/02/2004 >=3D20 > - > To unsubscribe from this list: send the line "unsubscribe xmail" in > the body of a message to [EMAIL PROTECTED] > For general help: send the line "help" in the body of a message to > [EMAIL PROTECTED] >=3D20 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.580 / Virus Database: 367 - Release Date: 06/02/2004 - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
