At 2:17 PM -0500 8/8/02, NetHead imposed structure on a stream of
electrons, yielding:
>Following is the "failure" message one of my users received when trying
>to send mail to her sister. Certain data has been altered to protect the
>innocent.
>
>-----
>Failed to deliver your message to [EMAIL PROTECTED]:
>SMTP: Address rejected by host
>Host 'beast.nts-online.net' says:
>554 Service unavailable; [67.105.93.126] blocked using dnsbl.njabl.org,
>reason: relay tested -- 1013175906
>
>
>Reporting-MTA: dns; pecandeluxe.com
>
>Final-Recipient: rfc822; [EMAIL PROTECTED]
>Action: failed
>Status: 5.0.0
>-----
>
>("[67.105.93.126]" is MY mail server ip)
>
>Does this mean I am blacklisted?
Yep.
It looks like the rather poorly-run blacklist under dnsbl.njabl.org
is listing you as an open relay. You can look addresses up in a large
number of lists at once at http://www.openrbl.org
>As I read this, it sounds like we are
>accused of having an open relay. I did a telnet test to my mail server
>and it responded, "we don't relay", but somehow someone must think it
>does.
>
>If I am blacklisted, how do I get off?
In this case, it looks like your best bet is to go to
http://njabl.org and follow the links. It appears that they tested
you in Feb. 2002 and got mail through.
> If I am relaying, how can I tell?
It will be pretty obvious if you are being actively used as a relay.
The server will be slow and you'll have piles of garbage in the queue.
If you are just open to some obscure relay hack that no spammers
actually use, and therefore are only an 'open relay' in a theoretical
sense, it may be non-obvious. The best way to figure that one out is
to do a relay test. There's a good one available at
http://www.abuse.net/relay.html which doesn't feed anyone's
blacklist. Many of the relay-listing DNSBL's also offer testing, but
if you really are not sure about your status that could result in a
nasty surprise: they test you as open and you immediately land in the
list. You can also telnet to relay-test.mail-abuse.org *FROM THE MAIL
SERVER* and watch a complete test live, with about 20 variants.
>And further, how do I shut it down?
IF you are relaying, it usually is just a matter of using a current
version of SIMS, setting "Relay for clients only" on, and using an
appropriate client list. It is possible to open up relaying holes
through pathological router settings, but that's rare.
>I am using SIMS 1.8b9d14. I have the "Relay for clients only" switch on.
>Is there something else?
Probably not. This listing is probably reflective of conditions in
02/02 that are no longer relevant.
--
Bill Cole
[EMAIL PROTECTED]
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
