Hi All,
 
We are using IMail 6.06 on Win 2K box.  The SMTP settings are as follows:
No Mail Relay
Allow Remote mail to local groups
Refuse NULL senders
Check valid sender
Auto-Deny possible hack attempts
Disable SMTP "VRFY" command
 
 
With these settings clients need to use/check the box 'My Server Requires Authentication' box to send the mails through mail clients.  Since last few days some mails are relayed by our server that are having sender's and recipient IDs that are not configured on our server.
 
From the respective .smd file we came to know that the mails are accepted from one of our client's network.  They are using PostMaster for mail distribution on their local network.  We concluded that the proxy server they are using must be an open proxy and is hijacked to send the spam mails.  We informed the client and it seems to be stopped. But in the mean time the mail queue was stuck and no mails were delivered to the destination.  We deleted the spam mails from the queue, restarted the server and manually cleared the spool using 'Send All' option.
 
Once the mail relay is closed, if the authentication information is saved in the mail client, the IMail doesn't verify if the sender's ID is valid on local server.  The accept.txt file can not be used with 'No Mail Relay' option.
Is there any way so as to check the valid sender's ID with 'No Mail Relay'? or anyother wayout to stop such incidences at server level?
 
Regards,
Aparna
 
 

Reply via email to