We
have our own SMTP server. We also have our own class B network. We
maintain our mail, print, web, and file servers. As far as we know, we
have not blocked port 25. Other IP addresses in our block are able to
connect to port 25. We think that Imail has somehow blocked access to port
25 for this one IP number.
Martha
-----Original Message-----I don't know what kind of connection you are attempting to connect *from*, but a great number of DSL and cable providers now block outbound port 25 connections to any server other than their OWN SMTP server, to prevent unaware clients from having hijacked machines spewing spam all over the Internet.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean
Sent: Tuesday, December 04, 2001 9:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Auto-deny possible hack attempts
At 10:39 AM 12/4/2001, Martha Flugstad wrote:
We have already tried to telnet to port 25 from that particular IP number.
We cannot connect. We have also looked at the logs and cannot find
anything. We've also checked the Relay for addresses. Our whole block of
IP addresses is listed. The Imail server seems to be blocking any
connection to port 25 from that IP number. However, we can telnet to port
110 (POP3) on the Imail server from that IP number. So far, we are baffled.
Thanks for your help.
Martha
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Eric Shanbrom
Sent: Tuesday, December 04, 2001 9:01 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Auto-deny possible hack attempts
You could also do a telnet session to the mail server and see if any errors
are returned. Best thing though is to look in the log on your IMail server.
Eric S
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, December 04, 2001 9:48 AM
Subject: Re: [IMail Forum] Auto-deny possible hack attempts
>
> >Does anyone know how Imail implements the "auto-deny possible hack
> >attempts" on the SMTP security?
>
> Yes. You check the box that says "Auto-deny possible hack attempts" on
the
> SMTP Security tab.
>
> >We have an IP number that is being refused access to port 25 on our Imail
> >server.
> >This IP number was assigned to a computer that received a virus. We have
> >cleaned
> >the virus and would like to unblock the IP number. Thanks for any help
> >you can give me.
>
> I believe you can't see the IPs that get listed, but stopping and
> restarting the SMTP service should clear the list (unlike the kill list,
> which won't get reset with a SMTP stop/restart).
>
> However, I haven't heard of a virus that will trigger the "Auto-deny
> possible hack attempts" (the Nimda one would, if it connected to the SMTP
> port the same way it connects to the HTTP port, but it doesn't connect to
> the SMTP port that way). So I would suspect there is another problem.
You
> might want to try having them do a ping or tracert/traceroute to your mail
> server, and see if they can reach it at all.
>
> You may also want to see if your firewall is doing the blocking.
>
> -Scott
> ---
> Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
> IMail. http://www.declude.com
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/_______________________
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com
