[xmail] Re: gun for hire

2007-01-15 Thread Rob Arends
David, My Grey matter is not retaining binary state that long - might need to replace it with flash ram. The quick tests I've done do indicate a closed relay, but Open relay was not the reported error with CBL. CBL reported email to spamtraps (and similar). So I was running through the things E

[xmail] Re: gun for hire

2007-01-15 Thread David Lord
On 15 Jan 2007, at 20:49, Rob Arends wrote: > 4. > What did you find in your logs? > Anything abnormal from IPs other than 10.10.10.99? > Your scripts on the server - are they webforms where email can be sent? (you > know, "contact us" forms) > There are known vulnerabilities in some web forms wh

[xmail] Re: Forwarding High Priority emails

2007-01-15 Thread waassssuu pppp
I have got myself all confused now. I decided that what I should do is just make the server check the emails to see if they are HIGH PRIORITY and if they are then send it to the Blackberry device. I can inform users that if they want a offic user to receive the email on said users blackberry then

[xmail] Re: SMTP AUTH

2007-01-15 Thread Vinny Wadding
If you use the AUTH command on an normal connection to the server, your user name and password would be sent in plain text. A malicious person with a packet sniffer would be able to capture the authentication details en route. I was hoping there would be a way to improve the security of peopl

[xmail] Re: SMTP AUTH

2007-01-15 Thread Davide Libenzi
On Mon, 15 Jan 2007, Vinny Wadding wrote: > > I am currently running XMail 1.23 and have started reading the > documentation for 1.24 and I had a question that I haven't come across > the answer to yet. > > Is there a way in XMail to stop it advertising SMTP AUTH unless the > connection is e

[xmail] SMTP AUTH

2007-01-15 Thread Vinny Wadding
I am currently running XMail 1.23 and have started reading the documentation for 1.24 and I had a question that I haven't come across the answer to yet. Is there a way in XMail to stop it advertising SMTP AUTH unless the connection is encrypted? I don't want it to be available on a normal co

[xmail] Re: gun for hire

2007-01-15 Thread Rob Arends
Erwin, I assumed your server IP 10.10.10.99 has only one NIC, and that the NAT was done elsewhere. You could of course have 2 NICs and have the public IP on one of the NICs. In this case I'd definitely never add the public IP to the smtp-relay.tab In fact I'd have your scripts send to 127.0.0.1 (

[xmail] Re: gun for hire

2007-01-15 Thread Rob Arends
Erwin, 1. The "Error: The RCPT command failed. The specified account does not exist" It might be that you need to specify the full email address as the username. Try using your MUA (outlook express etc) to send smtp auth mail using the userid that you wanted in the scripts. When you have that w

[xmail] Re: gun for hire

2007-01-15 Thread Erwin Meulensteen
Rob, Thank you for helping out. A good point in clearing the smtprelay.tab. If I do this. All scripts on the server give an error when trying to send e-mail. ASP (dundas) or PHP scripts fail. Even when I add an smtp account with username and password. Error: The RCPT command failed. The specified