RE: [IMail Forum] Why is IMail relaying these?

[Travis Rabe]

Title: Message

Relay for local users means you are an open relay - period.   Some got through and some didn't because during the course of the dictionary attack they found some valid users.   Travis -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd - Smart Mail Sent: Saturday, July 19, 2003 2:34 PM To: IMail List Subject: [IMail Forum] Why is IMail relaying these?     We had a problem earlier this week where someone was able to send spam though our server and I dont know how they did it.  Anyone want to explain?       Unfortunaly I don't have a copy of any of the emails. We ended up blocking @2cav34b.com in our gateway to stop it.        They were all from [EMAIL PROTECTED] going to addresses at @hanmail.net.  We are setup to relay for Local Users.  We have never had a problem till now.  We have not moved to relay for  IP Addresses yet but we probably will soon.        Sorry for the length of the log but it all seems to stem from the SMTPD(0BAA013C) queue,  mail2.smart-mail.net is our smtp gateway.  Non of these got though but some did and I want to know why IMail was relaying them.    Todd Hunter Progressive Systems     07:17 08:27 SMTPD(0BAA013C) [65.16.167.135] connect 65.16.167.134 port 1234 07:17 08:27 SMTPD(0BAA013C) [65.16.167.134] HELO mail2.smart-mail.net 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] ERR net.smart-mail.net invalid user <[EMAIL PROTECTED] 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] d:\IMail\spool\Da46e0baa013ca7e1.SMD 1524 07:17 08:28 SMTP-(00000778) processing d:\IMail\spool\Qa46e0baa013ca7e1.SMD 07:17 08:28 SMTP-(00000778) Trying hanmail.net (0) 07:17 08:28 SMTP-(00000778) Connect hanmail.net [211.233.28.113:25] (1) 07:17 08:28 SMTP-(00000778) 07:17 08:28 SMTP-(00000778) SMTP_DELIV_FAILED 07:17 08:28 SMTP-(00000778) >QUIT 07:17 08:28 SMTP-(00000778) 07:17 08:28 SMTP-(00000778) requeuing d:\IMail\spool\Qa46e0baa013ca7e1.SMP R0 T1 07:17 08:28 SMTP-(00000778) finished d:\IMail\spool\Qa46e0baa013ca7e1.SMP status=3 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] d:\IMail\spool\Da4720baa013cb81d.SMD 1526 07:17 08:28 SMTP-(00000814) processing d:\IMail\spool\Qa4720baa013cb81d.SMD 07:17 08:28 SMTP-(00000814) Trying hanmail.net (0) 07:17 08:28 SMTP-(00000814) Connect hanmail.net [211.43.197.109:25] (1) 07:17 08:28 SMTP-(00000814) 220 rmail-18.hanmail.net ESMTP welcome to HanMail.Net(tm) ready at Thu, 17 Jul 2003 22:28:17 +0900 07:17 08:28 SMTP-(00000814) >EHLO net.smart-mail.net 07:17 08:28 SMTP-(00000814) 250-rmail-18.hanmail.net Hello [65.16.167.135], pleased to meet you 07:17 08:28 SMTP-(00000814) 250-ENHANCEDSTATUSCODES 07:17 08:28 SMTP-(00000814) 250-PIPELINING 07:17 08:28 SMTP-(00000814) 250-8BITMIME 07:17 08:28 SMTP-(00000814) 250-SIZE 15360000 07:17 08:28 SMTP-(00000814) 250 HELP 07:17 08:28 SMTP-(00000814) >MAIL FROM:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(00F40094) [65.16.167.135] connect 65.16.167.135 port 2349 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] MAIL From:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTPD(0BAA013C) [65.16.167.134] d:\IMail\spool\Da4770baa013cca6d.SMD 1526 07:17 08:28 SMTP-(00000154) processing d:\IMail\spool\Qa4770baa013cca6d.SMD 07:17 08:28 SMTP-(00000154) Trying hanmail.net (0) 07:17 08:28 SMTP-(00000154) Connect hanmail.net [211.43.197.73:25] (1) 07:17 08:28 SMTP-(00000154) 220 rmail-155.hanmail.net ESMTP welcome to HanMail.Net(tm) ready at Thu, 17 Jul 2003 22:28:20 +0900 07:17 08:28 SMTP-(00000154) >EHLO net.smart-mail.net 07:17 08:28 SMTP-(00000154) 250-rmail-155.hanmail.net Hello [65.16.167.135], pleased to meet you 07:17 08:28 SMTP-(00000154) 250-ENHANCEDSTATUSCODES 07:17 08:28 SMTP-(00000154) 250-PIPELINING 07:17 08:28 SMTP-(00000154) 250-8BITMIME 07:17 08:28 SMTP-(00000154) 250-SIZE 15360000 07:17 08:28 SMTP-(00000154) 250 HELP 07:17 08:28 SMTP-(00000154) >MAIL FROM:<[EMAIL PROTECTED]> 07:17 08:28 SMTP-(00000814) 250 2.1.0 <[EMAIL PROTECTED]>... Sender ok 07:17 08:28 SMTP-(00000814) >RCPT To:<[EMAIL PROTECTED]> 07:17 08:28 SMTP-(00000814) 550 5.1.1 <[EMAIL PROTECTED]>... No such user 07:17 08:28 SMTP-(00000814) >QUIT 07:17 08:28 SMTP-(00000814) 221 2.0.0 rmail-18.hanmail.net closing connection 07:17 08:28 SMTP-(00000814) Creating message from Postmaster 07:17 08:28 SMTP-(00000814) finished d:\IMail\spool\Qa4720baa013cb81d.SMD status=2