Thanks to all who replied to my question.

I learned more than I wanted and all that I needed.  Looks like I have some
work to do to close up that server.

If I enable SMTP AUTH, will the COM component that I'm running on that
machine still be able to send email?  That KB article that Tom sent makes it
sound like it will relay messages coming from local IPs and domains, but I
just want to double check so I don't get screwed.  If not, I'll have to find
and install a new component that supports auth.  Ugh, and re-write scripts
that use the current component.

-Jeff


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Len Conrad
Sent: Thursday, March 28, 2002 12:23 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Question about domlist.exe report



>I have IMail SMTP configured to only allow relay for local users.

welcome to the Imail list.  you are an open relay

>So what are these domains doing on the list?

they are hijacking your open relay

>Here's the output rows in question:
>
>Domain                      # In  # Out    Bytes In  Bytes Out
>--------------------------------------------------------------
>OC31.YOURMAILSOURCE.COM        0      1           0       4813
>ofr.mb00.net                   0      1           0       2007
>bounce.etracks.com             0      2           0      14210
>MLM3.JOBSONLINE.COM            0      1           0       9753
>intervolved.net                0      1           0       5222
>uei-houston.com                0      2           0     276550
>airmail.net                    0      1           0    1004430

but not too badly.

hmmm, maybe this were valid MAIL FROM: used by your local users.

anyway, you're vulnerable to hijacking. fix it.

Len


http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND for NT4 & W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to