Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: nefkho on October 12, 2005, 08:17:23 AM

Title: please Help Open Relay problem
Post by: nefkho on October 12, 2005, 08:17:23 AM

hi,

i have tested my sme 6.0.1-01 with www.abuse.net and found to have open relay, anyone can help me fixed it.

thanks

Title: Re: please Help Open Relay problem
Post by: raem on October 12, 2005, 11:57:08 AM

nefkho

We are not mind readers.
You need to tell us what the message is from that test that convinces you that you are an open relay.

Also what contribs are installed, what modifications you have made, what updates you have applied etc etc.
Any signs of having been hacked.
Check your log files etc.

If you are truly an open relay then disconnect your box from the internet immediately & do not reconnect it until the open relay problem is fixed.

Title: please Help Open Relay problem
Post by: Reinhold on October 12, 2005, 12:46:57 PM

nefkho,

I very much agree with Ray here. - With no information you will receive no answer - NO HELP!

But if indeed you are an open relay we DO want to clear you :-o

Note: Unmodified, SME itself is pretty safe.
Check whether your SME has been taken over(due to some modifications).
or
whether the culprit is something "behind it" (like (Windows-) workstations.)

To check the server, install root-kit-hunter (http://www.rootkit.nl/root-kit-hunter)
(ssh into your server as root, cut and paste the code below)

Code: [Select]

cd /tmp
wget http://downloads.rootkit.nl/rkhunter-1.2.7.tar.gz
tar xvzf rkhunter-1.2.7.tar.gz
cd /tmp/rkhunter
sh installer.sh
rkhunter --update
rkhunter -c


- Post your abuse.net info
...give us the information abuse.net and you generated concerning your SME server that made you think your SME is an open relay.
- Report your rkhunter findings...

Good luck

Regards
Reinhold

Title: sorry guys, post alarm
Post by: nefkho on October 13, 2005, 11:45:39 AM

thanks,
i have re check everyting and its ok i am safe.