Koozali.org: home of the SME Server

Im relaying spam, how do stop it ?

Paul M

Im relaying spam, how do stop it ?
« on: February 07, 2004, 10:53:10 AM »
:cry: Hey all,
 
My ip is being blocked because im aparently relaying spam. Can someone tell me how to stop it ?

All advise appreciated. Im running 5.6u6 using dyndns.org.

Thanks Paul :-(

Anonymous

Im relaying spam, how do stop it ?
« Reply #1 on: February 07, 2004, 12:42:40 PM »
Install spamassassin contrib, it works great.

You may also want to send your email traffic via your ISP rather than direct to Internet, there is a setting in server manager I think in Email panel.
Regs
Ray

pete

Im relaying spam, how do stop it ?
« Reply #2 on: February 07, 2004, 01:57:03 PM »
I think he is talking about being an open relay - if it was postfix i could help you, but i dont know qmail....

This howto should help you though
http://mirror.contribs.org/smeserver/contribs/dmay/mitel/howto/smtp-restrict-howto.html

If not search these forums or google, and get it fixed quick  or turn your mail server OFF - otherwise you will soon be added to a lot of lists and some NEVER remove you...

MikeH

Im relaying spam, how do stop it ?
« Reply #3 on: February 07, 2004, 02:49:42 PM »
Quote from: "pete"
I think he is talking about being an open relay - if it was postfix i could help you, but i dont know qmail....

This howto should help you though
http://mirror.contribs.org/smeserver/contribs/dmay/mitel/howto/smtp-restrict-howto.html

If not search these forums or google, and get it fixed quick  or turn your mail server OFF - otherwise you will soon be added to a lot of lists and some NEVER remove you...


If you go to this address you can get the info to apply secure email to SME 5.6 and when installed you enable Remote SMTP authentication.
http://www.pagefault.org/code/e-smith/securemail/5.6/

Failing this you could upgrade to SME 6 which appears to be closed to relaying by default and I would just love to get a patch so that I can enable remote SMTP authentication?

Offline del

  • *
  • 765
  • +0/-0
Im relaying spam, how do stop it ?
« Reply #4 on: February 07, 2004, 03:38:02 PM »
Hi,
I thought all versions were closed by default. I am also running SME5.6 and I have not altered anything and my server doesn't relay (gets checked by Brighthouse, my cable provider every couple of months). Are you sure that it is relaying? Go here for information: http://www.abuse.net/relay.html
Regards,
Del :-o
If at first you don't succeed, then sky-diving is not for you!
"Life is like a coin. You can spend it anyway you wish, but you can only spend it once." --Author Unknown

duncan

Im relaying spam, how do stop it ?
« Reply #5 on: February 07, 2004, 04:49:36 PM »
Quote from: "del"
Hi,
I thought all versions were closed by default. I am also running SME5.6 and I have not altered anything and my server doesn't relay (gets checked by Brighthouse, my cable provider every couple of months). Are you sure that it is relaying? Go here for information: http://www.abuse.net/relay.html
Regards,
Del :-o


Yes, you really should do a few tests first to se if you truly are relaying. There are a number of reasons that you might be blocked that don’t involve your server being an open relay

Offline mocco

  • **
  • 32
  • +0/-0
Re: Im relaying spam, how do stop it ?
« Reply #6 on: February 07, 2004, 08:34:53 PM »
Quote from: "Paul M"
:cry: Hey all,
 
My ip is being blocked because im aparently relaying spam. Can someone tell me how to stop it ?

All advise appreciated. Im running 5.6u6 using dyndns.org.

Thanks Paul :-(


This is easier to install and set up that SA.
http://www.ibiblio.org/pub/Linux/distributions/smeserver/contribs/dmay/mitel/contrib/assp/
"What is the TRUTH is not always popular"
"What is popular is not always the TRUTH"

Howard Cosell :pint:...

Paul M

Relaying
« Reply #7 on: February 08, 2004, 02:34:23 AM »
:-D

Thanks all, you rock.


Paul

shanen

Im relaying spam, how do stop it ?
« Reply #8 on: February 08, 2004, 03:30:58 AM »
First ascertain if you are in fact relaying mail for others.
Look at your logs and try some of the online tests as suggested above.
Maybe your ip is in a RBL list through no fault of your own.

Offline chris burnat

  • *****
  • 1,135
  • +2/-0
    • http://www.burnat.com
Im relaying spam, how do stop it ?
« Reply #9 on: February 08, 2004, 10:21:46 AM »
Possibly a stupid idea, but... One of the worstations attached to your server couild be a victim of Doom, meaning that you are spewing hundreds of email per hour outbound under all sorts of fictitious names - not related to you at all.  This at first glance looks like relaying, just happened to one of my clients on a windoes box using winproxy.  First, looking at the logs, I panicked, assumed the box was used as a mail-relay, and shut it down. Not at all, done the testing, foolproof.  The traffic was traced to doomA on the main desk PC....  Got the server back up after disconnecting the guilty workstation, cleaned it, all back in order. Only genuine mail from registered users.
- chris
If it does not work out of the box, please fill in a Bug Report @ Bugzilla (http://bugs.contribs.org)  - check: http://wiki.contribs.org/Bugzilla_Help .  Thanks.