Re: [cobalt-users] open relay appears closed on Qube3 but is still blocked by blacklists

["roland" <roland@xxxxxxxxxxxxxxxxxxxxxxxxxxx>]

> Hi,
> 
> I got a report from our ISP a few weeks ago that our Qube3 was being
> used as an open relay. I closed it immediately, using the web 
> interface, but got another report today from a different source 
> (someone in the company trying to email a contact and being rejected)
> . I went and looked at the pages on http://relays.osirusoft.com/ and 
> it seems that there are still six or seven lists blocking the IP 
> address. 
> 
> I have checked this every way I know of - I double-checked that I had
> correctly followed the instructions in
> http://list.cobalt.com/pipermail/cobalt-users/2001-November/058862.html
> , I telnetted to relay-test.mail-abuse.org from the qube and tested the
> box from there as well as looking at various websites for testing for
> relays. All of them have displayed negative results, and yet i see spam
> sent from the box in the last couple of days. 
> 
> I've also had an email back from one of the testing services which tells
> me I'm running an unsecured HTTP CONNECT method proxy on port 3128. I
> have spent a long time looking for information or instructions on the
> web about how to fix this problem, but had no luck. 
> 
> I'm kind of at a dead end, and was wondering whether anyone on the list
> might have an idea about where I could go next. Obviously, we need to
> get ourselves off the blacklist :)
> 
> Thanks for you help!
> 
> ---
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
Block port 3128 (You can use ipchains or any firewall software)