RE: [cobalt-users] Urgent: Mail Relaying with no relaying Allowed :(

[Matthew.Overall@xxxxxxxxxxxxxx]

Apologies,

Ignore that last bit. The relay IP is someone in our range...

We are 
***.***.76.76
***.***.76.77

The relaying is coming from 
***.***.76.53

The /etc/mail/access file does not go down to the last IP digits . Ie. It allows relaying from...

***.***.76 

Therefore allowing this Spamming to happen. I cannot seem to alter this from the GUI and the details are held inside the part marked as 'do not change' 

Shall I just change this part anyway?

Many thanks,

Matty




-----Original Message-----
From: Matthew.Overall@xxxxxxxxxxxxxx [mailto:Matthew.Overall@xxxxxxxxxxxxxx] 
Sent: 20 June 2003 12:17
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-users] Urgent: Mail Relaying with no relaying Allowed :(


Our server is running 8.11.6 so not sure that will help!

An example of our logfile lines are ( I have removed bits with ** ** around. They tend to come in groups of six like this:

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: from=<anniesum@xxxxxxxxxxxxx>, size=1703, class=0, nrcpts=0, msgid=<200306180308.h5I38Pe06064@**OUR-FQDN**>, proto=SMTP, daemon=MTA, relay=[**OUR-IP-ADDRESS**]

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-A**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-B**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-C**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-D**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-E**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-F**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

Jun 18 04:08:25 ns3 sendmail[6064]: h5I38Pe06064: to=<**USER-G**@aol.com>, delay=00:00:00, mailer=esmtp, pri=1703, dsn=4.4.3, stat=queued

They are all queued as I have stopped deliveries by the server, it just queues them so we don't get blacklisted.

Matty

-----Original Message-----
From: Ron Sens [mailto:info@xxxxxxxxxxxxxx] 
Sent: 20 June 2003 11:16
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] Urgent: Mail Relaying with no relaying Allowed :(


Hi Matt,

We currently have the same problem on our server. We are even placed on the 
ORDB anti-spam database. We are considering upgrading sendmail to 8.11.6 for 
raq550. Have you done that already or are you planning to do so? Open relay 
is disabled by default on that release.

Ron

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to: http://list.cobalt.com/mailman/listinfo/cobalt-users


**********************************************************************
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.  If you have received this mail in error please notify the system manager.
 
This footnote also confirms that this email message has been virus checked.
**********************************************************************

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to: http://list.cobalt.com/mailman/listinfo/cobalt-users


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed.  If you have received this mail in error please notify
the system manager.
 
This footnote also confirms that this email message has been virus
checked.
**********************************************************************