From owner-freebsd-questions@FreeBSD.ORG Sat Aug 14 19:54:21 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8691710656A9 for ; Sat, 14 Aug 2010 19:54:21 +0000 (UTC) (envelope-from jon@radel.com) Received: from wave.radel.com (wave.radel.com [216.143.151.4]) by mx1.freebsd.org (Postfix) with ESMTP id 6BEC48FC0A for ; Sat, 14 Aug 2010 19:54:19 +0000 (UTC) Received: by wave.radel.com (CommuniGate Pro PIPE 4.1.6) with PIPE id 9776113; Sat, 14 Aug 2010 15:54:15 -0400 Received: from [216.143.146.251] (account jon@radel.com HELO [172.20.0.6]) by wave.radel.com (CommuniGate Pro SMTP 4.1.6) with ESMTP-TLS id 9776110 for freebsd-questions@freebsd.org; Sat, 14 Aug 2010 15:53:56 -0400 Message-ID: <4C66F46C.2030308@radel.com> Date: Sat, 14 Aug 2010 12:54:20 -0700 From: Jon Radel User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.8) Gecko/20100802 Thunderbird/3.1.2 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <20100814172307.035661065697@hub.freebsd.org> <4C66DAFC.8050807@gmail.com> In-Reply-To: <4C66DAFC.8050807@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms020101090100030501040206" X-Radel.com-MailScanner-Information: Please contact Jon for more information X-Radel.com-MailScanner: Found to be clean X-Mailer: CommuniGate Pro CLI mailer X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: Open Mail Relay X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Aug 2010 19:54:21 -0000 This is a cryptographically signed message in MIME format. --------------ms020101090100030501040206 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable On 8/14/10 11:05 AM, Mikhail wrote: > > On 14.08.2010 17:29, peter@vfemail.net wrote: >> I've reviewed my mail logs for the past couple of days and I can't >> find any entries for any mail addressed to the complainer's domain >> name except mail that should have been sent. > > You can try it yourself, with telnet and proper smtp commands. For > example, telnet from outside of your organization to your mail server > and issue: > > ehlo mydomain.com > mail from: foobar@example.com > rcpt to: foobar@example.org > data > test mail > . > > You actually have to get error message about relay denied for you. If > you don't - you're in trouble. > If you do recieve such message - you relay is closed and probably you > have spam worms who send emails from legit user, or something like that= =2E The basic test, but hardly sufficient to determine if all the known ways = of fooling an smtp server are accounted for. Recall from the OP's=20 description: "saying relaying was denied in 17 separate tests." The above also can be an issue if you do the test from an IP address=20 that the SMTP server has been configured to treat as "trusted." --Jon Radel jon@radel.com --------------ms020101090100030501040206--