From owner-freebsd-questions@FreeBSD.ORG Thu Jun 19 05:51:33 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F1F337B401 for ; Thu, 19 Jun 2003 05:51:33 -0700 (PDT) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id E113943F75 for ; Thu, 19 Jun 2003 05:51:31 -0700 (PDT) (envelope-from fgleiser@cactus.fi.uba.ar) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id h5JCoohD071945; Thu, 19 Jun 2003 09:50:50 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Thu, 19 Jun 2003 09:50:50 -0300 (ART) From: Fernando Gleiser To: Andreas =?iso-8859-1?Q?Wider=F8e?= Andersen In-Reply-To: <5.2.0.9.0.20030619141344.02971008@mail.pragma.no> Message-ID: <20030619094727.W61487-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=ISO-8859-1 Content-Transfer-Encoding: QUOTED-PRINTABLE X-Spam-Status: No, hits=-119.5 required=5.0 tests=EMAIL_ATTRIBUTION,IN_REP_TO,QUOTED_EMAIL_TEXT, REPLY_WITH_QUOTES,USER_IN_WHITELIST version=2.53 X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) cc: freebsd-questions@FreeBSD.ORG Subject: Re: Do I have an open relay? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jun 2003 12:51:33 -0000 On Thu, 19 Jun 2003, Andreas Wider=F8e Andersen wrote: > Hi, > I'm a bit nervous here. Recently I've started getting 20-25 mails to my > Postmaster account on my FreeBSD 4.8RC server running Sendmail > 8.12.8/8.12.8 each day with a message to Postmaster that the mail could n= ot > be delivered. Sendmail by default does not relay, unless you enable PROMICUOUS_RELAY. To test if you have an open relay, go to: http://www.abuse.net/relay.html and run a test against your server. It may be a "rumplestinkin attack", the spammers are trying to guess account names in your server, postmaster gets a copy of the bounce. Look at the logs for the full info. =09=09=09Fer