Koozali.org: home of the SME Server

please Help Open Relay problem

Offline nefkho

  • *****
  • 183
  • +0/-0
    • http://www.cagothonglines.com
please Help Open Relay problem
« on: October 12, 2005, 08:17:23 AM »
hi,

i have tested my sme 6.0.1-01 with www.abuse.net and found to have open relay, anyone can help me fixed it.

thanks
Nef Kho  :-) .........

Offline raem

  • *
  • 3,972
  • +4/-0
Re: please Help Open Relay problem
« Reply #1 on: October 12, 2005, 11:57:08 AM »
nefkho

We are not mind readers.
You need to tell us what the message is from that test that convinces you that you are an open relay.

Also what contribs are installed, what modifications you have made, what updates you have applied etc etc.
Any signs of having been hacked.
Check your log files etc.

If you are truly an open relay then disconnect your box from the internet immediately & do not reconnect it until the open relay problem is fixed.
...

Offline Reinhold

  • *
  • 517
  • +0/-0
    • http://127.0.0.1
please Help Open Relay problem
« Reply #2 on: October 12, 2005, 12:46:57 PM »
nefkho,

I very much agree with Ray here. - With no information you will receive no answer - NO HELP!

But if indeed you are an open relay we DO want to clear you :-o

Note: Unmodified, SME itself is pretty safe.
Check whether your SME has been taken over(due to some modifications).
or
whether the culprit is something "behind it" (like (Windows-) workstations.)

To check the server, install root-kit-hunter
(ssh into your server as root, cut and paste the code below)
Code: [Select]
cd /tmp
wget http://downloads.rootkit.nl/rkhunter-1.2.7.tar.gz
tar xvzf rkhunter-1.2.7.tar.gz
cd /tmp/rkhunter
sh installer.sh
rkhunter --update
rkhunter -c


- Post your abuse.net info
...give us the information abuse.net and you generated concerning your SME server that made you think your SME is an open relay.
- Report your rkhunter findings...

Good luck

Regards
Reinhold
............

Offline nefkho

  • *****
  • 183
  • +0/-0
    • http://www.cagothonglines.com
sorry guys, post alarm
« Reply #3 on: October 13, 2005, 11:45:39 AM »
thanks,
i have re check everyting and its ok i am safe.
Nef Kho  :-) .........