Of David Dodell
Sent: Sunday, July 06, 2003 9:26 AM
To: Bill Landry
Subject: Re: [Declude.JunkMail] open relay tester
http://www.abuse.net/relay.html
Thanks everyone for all the suggestions ... as I was told, the exchange
server is closed, BUT it did respond open to a one of the abuse.net
At 08:14 AM 7/6/2003, you wrote:
I have a customer who claims that their exchange box is closed as an
open relay ... however, I'm seeing hundreds of spam messages come
through them that started on Friday.
I've shut down their outbound service, but I thought DNSSTUFF had an
open relay test of some
Try: http://www.dnsreport.com/
Run the DNS Report against a domain hosted by the mail server. In the mail
section you should see the following if they are not an open relay:
PASS Open relay test OK: All of your mailservers appear to be closed to
relaying.
gw2.pointshare.com OK: 550 : Relay
Is there any other open relay tester I can use so I can
document this for them?
Open a command line interface on your workstation.
Telnet to the exchange servers IP on port 25 (SMTP)
Type in the following commands line per line:
ehlo yourdomain.com
mail from: [EMAIL
David,
The open relay test is at www.dnsreport.com.
Todd
- Original Message -
From: David Dodell [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, July 06, 2003 10:14 AM
Subject: [Declude.JunkMail] open relay tester
I have a customer who claims that their exchange box is
The open relay test is at www.dnsreport.com.
This works great for a domain, but the customer gets all of his mail from/to me ... so
I need to test the actual IP address.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This
http://www.abuse.net/relay.html
Thanks everyone for all the suggestions ... as I was told, the exchange
server is closed, BUT it did respond open to a one of the abuse.net
formats (#11) ... so their might be a hole in Exchange for open relay
that is being exploited?
David
---
[This E-mail was
So how good are these tests? I've been tracking spam from mail.fea.net for the last
few days (over 40 in the last 12 hours alone), all seem to be relayed and fea.net
seems to be a friendly neighborhood ISP.
They don't show up in any DBs, so I had to block their IP.
Dan
On Sunday, July 6,
] open relay tester
So how good are these tests? I've been tracking spam from mail.fea.net for
the last few days (over 40 in the last 12 hours alone), all seem to be
relayed and fea.net seems to be a friendly neighborhood ISP.
They don't show up in any DBs, so I had to block their IP.
Dan
