same here, even tried the old "spammers" trick - seems no relaying is
allowed.

220 X1 NT-ESMTP Server mail.apiix.com (IMail 6.06 3258-2)
ehlo
250-mail.apiix.com says hello
250-SIZE 0
250-8BITMIME
250-DSN
250-ETRN
250 EXPN
mail from:anyone@[202.71.162.12]
250 ok
rcpt to:[EMAIL PROTECTED]
550 not local host aquatania.co.uk, not a gateway

Allen



----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: 18 January 2003 18:34
Subject: RE: [IMail Forum] ARGHHHH my server is under attack again @#$@%%^%#


>
> >Just tried to relay and it blocked my attempt.
>
> yes, mine, too, yesterday or whenever. his machine is not a wide-open
relay.
>
> >What happen here ??????????????
>
> clearly, some kind of relay leaking is happening, duh.
>
> >Can someone please try to relay mail with my server 202.71.162.12
>
> same old story:
>
> mx1# telnet 202.71.162.12 25
> Trying 202.71.162.12...
> Connected to 202.71.162.12.
> Escape character is '^]'.
> 220 X1 NT-ESMTP Server mail.apiix.com (IMail 6.06 19-2)
> ehlo this.is.len
> 250-mail.apiix.com says hello
> 250-SIZE 0
> 250-8BITMIME
> 250-DSN
> 250-ETRN
> 250 EXPN
> mailfrom:<[EMAIL PROTECTED]>
> 250 ok
> rcpt to:<[EMAIL PROTECTED]>
> 550 not local host go2france.com, not a gateway
> quit
> 221 Goodbye
> Connection closed by foreign host.
>
> so you have a closed relay.
>
> >I opened one of the GSE file and here is the header
>
> not interesting.  The only thing you should worry about is the ip from
> which it was sent and why that ip was accepted by Imail for relaying to
> non-local envelope recipients.
>
> I would suggest noting and then deleting all your "relay for addresses"
> items and then key them back in very carefully (don't paste).
>
> Maybe Imail's entry routine doesn't filter garbage down to valid numeric
> "dotted quad" format and you have some invisible garbage in your "relay
for
> addresses" data that is leaving you open to more than you want.
>
> You could perhaps confirm this by noting all the ip's that have raped you,
> and see if they are in the same netmask, as Scott was getting at.
>
> Len
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
> _____________________________________________________________________
> This message has been checked for all known viruses by the
> MessageLabs Virus Scanning Service supplied by Aquatania Ltd. For further
information visit www.aquatania.co.uk
> http://www.messagelabs.com/stats.asp
>
>



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to