So how good are these tests?  I've been tracking spam from mail.fea.net for the last 
few days (over 40 in the last 12 hours alone), all seem to be relayed and fea.net 
seems to be a friendly neighborhood ISP.

They don't show up in any DBs, so I had to block their IP.

Dan



On Sunday, July 6, 2003 8:34, Bill Landry <[EMAIL PROTECTED]> wrote:
>Try: http://www.dnsreport.com/
>
>Run the DNS Report against a domain hosted by the mail server.  In the mail
>section you should see the following if they are not an open
>relay:
>
>PASS Open relay test OK: All of your mailservers appear to be closed to
>relaying.
>gw2.pointshare.com OK: 550 : Relay access denied
>gw1.pointshare.com OK: 550 : Relay access denied
>
>Some other relay test sites:
>
>http://www.abuse.net/relay.html
>
>http://www.ja.net/mail/anti-spam/STAN.html#request
>
>http://www.ordb.org/submit/
>
>http://www.btoy1.rochester.ny.us/Security/MailTest.php
>
>Also, you can telnet from a mail server to mail-abuse.org and it will run an
>interactive relay test in real time back to the connecting mail server (see
>http://mail-abuse.org/tsi/ar-test.html).
>
>Bill
>----- Original Message ----- 
>From: "David Dodell" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Sunday, July 06, 2003 8:14 AM
>Subject: [Declude.JunkMail] open relay tester
>
>
>> I have a customer who claims that their exchange box is closed as an
>> open relay ... however, I'm seeing hundreds of spam messages come
>> through them that started on Friday.
>>
>> I've shut down their outbound service, but I thought DNSSTUFF had an
>> open relay test of some type but can't find it.
>>
>> Is there any other "open relay tester" I can use so I can document
>> this for them?
>>
>> David
>>
>> ---
>> [This E-mail was scanned for viruses by Declude Virus
>(http://www.declude.com)]
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>>
>
>---
>[This E-mail was scanned for viruses by Declude Virus
>(http://www.declude.com)]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to