[cobalt-users] Sendmail with Solarspeed patch but seems to Relay ...

["Jason M. Weber" <IT@xxxxxxxxxxxx>]

I ran the test against our RaQ4 in anonymous mode and it found no open
relays. Our SMTP server crashes, I don't know why and no one has been able
to come up with a reason yet, when we have PopBeforeSMTP turned on so it is
currently off. Our PopBeforeSMTP problem showed up sometime after the last
rebuild from scratch in Dec when we got hacked over the weekend that the
SHP-Removal patch was released. The only packages other than the standard
Cobalt patches that were installed at the time was the latest OpenWebmail
from pkgmaster.com.

~ Jason

> From: "jeanjean" <jeanjean@xxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Date: Wed, 12 Mar 2003 19:45:48 +0100
> Subject: [cobalt-users] Sendmail with Solarspeed patch but seems to Relay
...
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>
> Hi,
>
> I also installed the Solarspeed Sendmail patch, but now, abuse.net report
> that ALL my servers relay the mails....
> Here is a 'filtred' relay test mail from abuse.net :
> --------------------------------------------------------------
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>
>     Target host = www.xyz.com [216.120.x.y]
>     Test performed by myown@xxxxxxxxx from 213.13.x.y
>
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>
> For information on how to secure a mail server against third-party
> relay, visit <URL: http://www.mail-abuse.org/tsi/>.
>
> --------------------------------------------------------------
>
> Well, normally the server should NOT receive and send me this mail...
> PopBeforeSMTP is checked, then manually restarted, nothing helps....   All
> our servers ( 12 Cobalt Raq4 full Cobalt patched + sendmail patch from
> Solarspeed) are vulnerable !
>
> Can anybody make the test also ?
>
> http://www.abuse.net/relay.html
>
> You have to register (for free) at first.
> Only 1 test / day is possible / server.
> Thanks to let me know your results.
> Best regards
> Jean