I'm confused about some entries in our spool file.  Periodically, I see
something like this:

09:09 00:29 SMTPD(012B01E0) [213.59.53.67] HELO bestsites.ru
09:09 00:29 SMTPD(012B01E0) [213.59.53.67] MAIL FROM:<[EMAIL PROTECTED]>
09:09 00:29 SMTPD(012B01E0) [213.59.53.67] RCPT TO:<[EMAIL PROTECTED]>
09:09 00:29 SMTPD(012B01E0) [213.59.53.67] ERR bcw4.bcwebhost.net invalid
user <[EMAIL PROTECTED]

kazan.ws is not one of our domains, so I take this as someone trying to
relay through our server and I interpret the error message to mean that the
server refused to relay.  I should mention that we require SMTP Auth for
relay.

Where things get funny is with this entry:

09:09 12:57 SMTPD(0022021E) [216.210.176.234] HELO JLSRF01
09:09 12:57 SMTPD(0022021E) [216.210.176.234] MAIL FROM:
<[EMAIL PROTECTED]>
09:09 12:57 SMTPD(0022021E) [216.210.176.234] RCPT TO: <[EMAIL PROTECTED]>
09:09 12:57 SMTPD(0022021E) [216.210.176.234] ERR bcw4.bcwebhost.net invalid
user <[EMAIL PROTECTED]

This appears to be the same error message, but this is a legitimate client
who is using SMTP Auth.  So I don't understand why she is getting this error
message.  What's more, this particular (test) message was sent to her
personal AOL account, and she received it.  So, in spite of the error
message in the log, it looks like it went through.

My questions:

1. Does the error message really mean that a illegal relay attempt was
foiled?
2. Then why did Stephanie's message go through to her AOL account?
3. And why does she get the error message anyway?

By way of background, our SMTP security settings are: check value sender
(checked) and relay for addresses (which lists a few addresses -- most of
our clients have addresses outside of our control).  That's supposed to be
enough to block open relaying, but IMail security is something I find
confusing.

Thanks,

Ben Bednarz
BC Web



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to