Hi!
I didn't notice until I realized that outgoing mails seemed to "hang"
somewhere, but obviously someone has been able to use my James server as
an open relay a few days ago and my outgoing spool repository was filled
up with undeliverable mails. After deleting the mails from the spool
table, the server seem to work fine again now.
If the SMTP server log is correct, someone connected from an untrusted
IP, provoked some errors and then managed to send mails to non-local
addresses without authenticating. The first occurences were logged like
this:
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:49 INFO smtpserver: Connection from <some dynamic ip>
18/06/08 21:43:52 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:53 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:55 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED] character at 8
18/06/08 21:43:56 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:58 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:59 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:43:59 ERROR smtpserver: Error parsing recipient address:
[to:[EMAIL PROTECTED] [from:[EMAIL PROTECTED]
character at 8
18/06/08 21:44:00 INFO smtpserver: Successfully spooled mail
Mail1213818240095-91994 from [EMAIL PROTECTED] on 67.88.45.67 for
[<deleted list of non-local addresses>]
Is it somehow possible to find out why James decided to allow this to
happen?
Tor
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
