The remote server is refusing your SMTP connection. I tried it and got
connected, so I figure that you are on some SPAM/BlackHole list and they are
using that to reject connections.
Daniel Donnelly
Ipswitch Technical Support
________________________________________________________
See our Knowledge Base at http://support.ipswitch.com/kb
----- Original Message -----
From: "T. Bradley Dean" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 27, 2000 6:10 PM
Subject: RE: [IMail Forum] Help - I'm being attacked
> K, I got most of the mail to go out. But one won't budge. I removed it
from
> the spool and resent it, but now I'm getting this in the logs:
>
> -------------------------------------------------------------------
>
> 07:27 14:14 SMTPD(08B30042) [208.170.56.151] connect 208.170.56.174 port
> 3948
> 220 X1 NT-ESMTP Server mail.infodish.com (IMail 5.00 3910-1)
> HELO sfs0474
> 07:27 14:14 SMTPD(08B30042) [208.170.56.174] HELO sfs0474
> 250 hello mail.infodish.com
> MAIL FROM: <[EMAIL PROTECTED]>
> 250 ok
> 07:27 14:14 SMTPD(08B30042) [208.170.56.174] MAIL FROM:
> <[EMAIL PROTECTED]>
> RCPT TO: <[EMAIL PROTECTED]>
> 07:27 14:14 SMTPD(08B30042) [208.170.56.174] RCPT TO:
> <[EMAIL PROTECTED]>
> [x] looking up moore-solutions.com in HOSTS
> 250 ok its for <[EMAIL PROTECTED]>
> DATA
> 354 ok, send it; end with <CRLF>.<CRLF>
>
> 250 Message queued
> 07:27 14:14 SMTPD(08B30042) [208.170.56.174] F:\IMAIL\spool\Da625042.SMD
> 2197
> 07:27 14:14 SMTP-(00000065) processing F:\IMAIL\spool\Qa625042.SMD
> QUIT
> 221 Goodbye
> 07:27 14:14 SMTP-(00000065) ldeliver mail.infodish.com copybox-main (1)
> <[EMAIL PROTECTED]> 2197
> 07:27 14:14 SMTP-(00000065) Trying moore-solutions.com (0)
> 07:27 14:14 SMTP-(00000065) Connect moore-solutions.com [167.87.227.2:25]
> (1)
> 07:27 14:14 SMTP-(00000065) 421 raptor3.sea.siemens.com Sorry, you are not
> authorized to make this connection.
> 07:27 14:14 SMTP-(00000065) SMTP_DELIV_FAILED
> 07:27 14:14 SMTP-(00000065) >QUIT
> 07:27 14:14 SMTP-(00000065)
> 07:27 14:14 SMTP-(00000065) requeuing F:\IMAIL\spool\Qa625042.SMP R0 T1
> 07:27 14:14 SMTP-(00000065) finished F:\IMAIL\spool\Qa625042.SMP status=3
> 07:27 14:15 SMTPD(089E009C) [208.170.56.136] connect 208.170.56.136 port
> 3848
> 220 X1 NT-ESMTP Server mail.infogiant.com (IMail 5.00 3911-1)
> QUIT
> 221 Goodbye
>
>
> -------------------------------------------------------------------
> I've sent to this guy before, what's up?
>
> Bradley Dean
> [EMAIL PROTECTED]
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of T. Bradley Dean
> Sent: Thursday, July 27, 2000 2:50 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [IMail Forum] Help - I'm being attacked
>
>
> Trouble! I changed the options to 'Relay For Addresses 208.170.56.128' and
> no mail would go out. I changed it to 208.170.56.0 and it gave errors to
> Outlook. I switched it back to 'Local Hosts' and now I can send email. But
> now I've got his nice little collection of email sent during the 'Relay
For
> Addresses' period. It's not sending them, they are just sitting their in
the
> Spool directory.
>
> First, what do I do to make those go out!?!!?
>
> Second, why didn't 'Relay For Addresses' work?
>
> Bradley Dean
> [EMAIL PROTECTED]
>
> -----Original Message-----
> From: T. Bradley Dean [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, July 27, 2000 2:36 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [IMail Forum] Help - I'm being attacked
>
>
> Thanks everyone. If you guys get this, then everything is working fine.
>
> I've turned off "Refuse Null Senders", changed my relay options to "Relay
> For Addresses 208.170.56.128, Subnet Mask 255.255.255.128", and I put in
> Dooz's 'Kill File'.
>
> One more time, let's see if you guys can hack this baby now!!
>
> Bradley Dean
> [EMAIL PROTECTED]
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Dooz L Owings
> Sent: Thursday, July 27, 2000 1:18 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [IMail Forum] Help - I'm being attacked
>
>
> Yes that will cover you, but if you are a big operation I would move your
> mail server to a full class C' block. Having it on a partial has a lot of
> drawbacks..
>
> Dooz Owings
> ---
> **********************************************************
> There are 3 types of people in life, those who make things happen, those
who
> watch things happen and those who can't figure out what happened! Have
fun
> scratching your head on the sidelines.
> **********************************************************
>
> On Thu, 27 Jul 2000 12:29:45 T. Bradley Dean wrote:
> >Okay, I applied the kill file, thanks.
> >
> >One more question: I went to change the settings to 'Relay for
addresses'.
> I
> >have IP addresses 208.170.56.128 to 208.170.56.255. If I put in
> >208.170.56.0, will that cover me? I tried 208.170.56.128/25 but it didn't
> >like that.
> >
> >Bradley Dean
> >[EMAIL PROTECTED]
> >
> >-----Original Message-----
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED]]On Behalf Of Dooz L Owings
> >Sent: Wednesday, July 26, 2000 3:08 PM
> >To: [EMAIL PROTECTED]
> >Subject: RE: [IMail Forum] Help - I'm being attacked
> >
> >
> >Brad,
> >
> > Click on the SMTP security tab in there click on the edit kill file
> >button.. Then copy my list to your clipboard then past it into your kill
> >file.. This will reject all email from the list.. Trust me if I put them
on
> >the list there was a dam good reason for it...
> >
> > Dooz Owings
> >---
> > **********************************************************
> >There are 3 types of people in life, those who make things happen, those
> who
> >watch things happen and those who can't figure out what happened! Have
fun
> >scratching your head on the sidelines.
> > **********************************************************
> >
> >On Wed, 26 Jul 2000 13:25:20 T. Bradley Dean wrote:
> >>How do I use it?
> >>
> >>Does it just reject any email sent from these domains? Do the senders
get
> >an
> >>acknowledgement?
> >>
> >>Bradley Dean
> >>[EMAIL PROTECTED]
> >>
> >>-----Original Message-----
> >>From: [EMAIL PROTECTED]
> >>[mailto:[EMAIL PROTECTED]]On Behalf Of Dooz L Owings
> >>Sent: Wednesday, July 26, 2000 7:54 AM
> >>To: [EMAIL PROTECTED]
> >>Subject: RE: [IMail Forum] Help - I'm being attacked
> >>
> >>
> >>Brad,
> >>
> >> Here is a copy of my kill file look it over you may want to use it I
> >work
> >>with these spammers every day... The key is the access control that is
> what
> >>I am currently working on..
> >>
> >> Dooz Owings
> >>---
> >> **********************************************************
> >>There are 3 types of people in life, those who make things happen, those
> >who
> >>watch things happen and those who can't figure out what happened! Have
> fun
> >>scratching your head on the sidelines.
> >> **********************************************************
> >>
> >>On Tue, 25 Jul 2000 15:31:25 T. Bradley Dean wrote:
> >>>Let me make sure I understand, correct me if I'm wrong. But from all
> these
> >>>postings I've determined:
> >>>
> >>>Relay for anyone: iMail will send any mail it's asked to send
> >>>Relay mail for address: iMail will send any mail that originates from
> >>>specified IP addrs
> >>>No Mail Relay: iMail will not relay any mail
> >>>Local Hosts Only: iMail will relay any mail where the from field claims
> to
> >>>be one of my domains
> >>>Local Users Only: iMail will relay any mail where the from field claims
> to
> >>>be one of my users
> >>>
> >>>So I haven't really made it much harder at all to send spam through my
> >>>server. If I choose relay for addresses and give it my internal IP
block
> >>>then only outside users dialed into other ISPs will need to enable SMTP
> >>>auth. All other users, including users sending mail from the imail web
> >>>templates will be unaffected.
> >>>
> >>>Please forgive me, I'm sure all of this is painfully obvious to all you
> >>>email veterans. Thank you so much everyone who has helped out!
> >>>
> >>>Bradley Dean
> >>>[EMAIL PROTECTED]
> >>>
> >>>-----Original Message-----
> >>>From: [EMAIL PROTECTED]
> >>>[mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]
> >>>Sent: Tuesday, July 25, 2000 2:34 PM
> >>>To: [EMAIL PROTECTED]
> >>>Subject: RE: [IMail Forum] Help - I'm being attacked
> >>>
> >>>
> >>>> I already saw it go through on the copybox account. Nice
> >>>> touch with the
> >>>> InfoDish email account. =)
> >>>>
> >>>> What did I do wrong? Here is an image of my settings screen:
> >>>> http:\\www.InfoDish.com\Imail.jpg
> >>>
> >>>Relay for Local Hosts is still a wide-open door for spammers. All they
> >>>have to do is spoof the mail-from address to be one from your system,
> >>>like "[EMAIL PROTECTED]".
> >>>
> >>>You need to set Relay Mail for Addresses, then set your IP(s) to allow
> >>>sending from. Spoofing IP's is significantly more work for spammers,
and
> >>>few do it. Only router programming will stop that.
> >>>
> >>>Also, you should not refuse mail from NULL senders; otherwise, bounce
> >>>notices from other MTA's will, uh, bounce, because the RFC's specify a
> >>>NULL sender for those types of messages.
> >>>
> >>>Hope this helps,
> >>>Ron
> >>>
> >>>ron allen hornbaker humankind systems, inc. mailto:[EMAIL PROTECTED]
> >>>HKSI WebMail Templates for IMail v6x ~ Now 559 Installations Worldwide
> >>>Demo: http://mail.hksi.net Buy: http://humankindsystems.com/products
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>Please visit http://www.ipswitch.com/support/mailing-lists.html
> >>>to be removed from this list.
> >>>
> >>>An Archive of this list is available at:
> >>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >>>
> >>>Please visit http://www.ipswitch.com/support/mailing-lists.html
> >>>to be removed from this list.
> >>>
> >>>An Archive of this list is available at:
> >>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >>>
> >>
> >>
> >>What are you N2? Choose from 150 free e-mail addresses.
> >>http://www.n2mail.com
> >>
> >>Please visit http://www.ipswitch.com/support/mailing-lists.html
> >>to be removed from this list.
> >>
> >>An Archive of this list is available at:
> >>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >>
> >
> >
> >What are you N2? Choose from 150 free e-mail addresses.
> >http://www.n2mail.com
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
> >Please visit http://www.ipswitch.com/support/mailing-lists.html
> >to be removed from this list.
> >
> >An Archive of this list is available at:
> >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
>
>
> What are you N2? Choose from 150 free e-mail addresses.
> http://www.n2mail.com
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
