I don't see open relay, unless someone's spoofing localhost (127.). I'm
still betting on a compromised password.
If you google around, you can find sites which test your IP for open
relay. dnsreports.com might (or might not) be one. I don't recall off hand.
--
-Eric 'shubes'
On 01/08/2014 07:23 PM, Chandran Manikandan wrote:
Hi Eric,
My tcp.smtp file below like that.
127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private",RBLSMTPD="",NOP0FCHECK="1"
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKQUEUE="/var/qmail/bin/qmail-queue.orig",DKSIGN="/var/qmail/control//domainkeys/%/private",NOP0FCHECK="1"
I had stopped pdns-recursor service after that i could not get unknow
email address on the qmail queue. Is this 53 port issue. Please let me
know and i will monitor another two more days for this issue and update you.
On Thu, Jan 9, 2014 at 2:18 AM, Eric Shubert <[email protected]
<mailto:[email protected]>> wrote:
On 01/08/2014 10:53 AM, Nicholas Chua wrote:
>>
>> What's in your /etc/tcprules.d/tcp.smtp file?
>>
>> QMT is not configured to be an open relay by default.
>>
>> More likely you have a compromised password. Check your smtp log
>> (# qmlog smtp) to determine if the messages were submitted with
>> authentication or not. If they were sent with authentication, change
>> that password. If not, then you have an open relay, which would be a
>> misconfiguration in tcp.smtp file.
>
> <snip>
>
> definitely an open relay
>
> regards
> nic
>
What makes you say so? Did you run a test of some sort?
--
-Eric 'shubes'
---------------------------------------------------------------------
To unsubscribe, e-mail:
[email protected]
<mailto:[email protected]>
For additional commands, e-mail:
[email protected]
<mailto:[email protected]>
--
*Thanks,*
*Manikandan.C*
*System Administrator*
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
