I turn off their computer and even deleted their mail account . My smtp log shows CHKUSER accepted sender .Client allowed to relay.
From: Helmut Fritz [mailto:[email protected]] Sent: Wednesday, March 27, 2013 12:50 PM To: [email protected] Subject: RE: [qmailtoaster] Relaying It may be that user has a worm/virus. From: Rvaught [mailto:[email protected]] Sent: Wednesday, March 27, 2013 9:44 AM To: [email protected] Subject: RE: [qmailtoaster] Relaying I tried removing sender_nocheck=1 and I am still relaying outside mail on that account. From: Helmut Fritz [mailto:[email protected]] Sent: Wednesday, March 27, 2013 12:18 PM To: [email protected] Subject: RE: [qmailtoaster] Relaying I believe sender_nockeck=1 is the issue? I think that turns off authentication for senders. others with a lot more expertise in tcp rules than I will hopefully confirm. From: Rvaught [mailto:[email protected]] Sent: Wednesday, March 27, 2013 8:54 AM To: [email protected] Subject: [qmailtoaster] Relaying Somehow I have something setup wrong now and I am having spam being relayed thru my email server on one email account . I have changed their password. I think I have something wrong in my tcprules.d file . I want to allow local users to send mail but block relaying. I have : 127.:allow,RELAYCLIENT="" 192.:allow,RELAYCLIENT="" 128.:allow,RELAYCLIENT="" :allow,BADMIMETYPE="",SENDER_NOCHECK="1",CHKUSER_RCPT_FORMAT="0",CHKUSER_SEN DER_FORMAT="0",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="75",CHKUSER_WRONGRCPTLIM IT="50",QMAILQUEUE="/var/qmail/bin/simscan" 192 and 128 are my local networks. Rick
