>Somehow, we have been listed by ORBD.
That would be because you are an open relay.
>Relaying is set to local user only.
That's why you are an open relay.
To not be an open relay, you can either use IMail's "Relay for addresses"
(in which case you would enter a list of "safe" IP addresses that your
users may come from; anyone not coming from those safe IPs would need to
use SMTP AUTH), or "No mail relay" (which really means that everyone must
use SMTP AUTH). Note that relay setting apply only to outgoing E-mail, so
no matter what your settings are, your users will still be able to get mail.
>I do not understand the message that they say proves we are a relay, can
>someone interrupt for me?
It's a blank E-mail, so it doesn't really say anything.
But:
>X-ORDB-Envelope-MAIL-FROM: <[EMAIL PROTECTED]>
>X-ORDB-Envelope-RCPT-TO: <[EMAIL PROTECTED]>
This shows that they were able to send the mail by using a return address
of "[EMAIL PROTECTED]". That's the problem with Relay for Local
Users; anyone can send mail through your server.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
