The spammer is taking advantage of the fact that you had null passwords. That makes authentication easy. SIMS is an open relay to anyone who has authenticated.
Lesson: never, for any reason, in any system, ever, leave a password null.
Yes, I see that now. :) Just in case anybody is wondering, throwing in some (literally) random passwords on the Postmaster and webmaster account fixed the problem pretty good.
Here's a question: Do I even need to have an account for a name if it is just a forwarding name via the Router? That is, do I need to keep a webmaster account if my router says "webmaster = my_main_email"?
No, but you cannot delete postmaster. It is special. Even if it forwards via the router, SIMS needs the account to exist for administration of the server.
Thanks a ton guys. And those extra spam blocks (blacklist.alfordmedia.com, cbl.abuseat.org) have helped some too.
Question: If I use sbl-xbl.spamhaus.org, do I need to use cbl.abuseat.org? From your discussion it seems like the cbl is included in the xbl, so it would be redundant, ja?
Indeed.
-- Bill Cole [EMAIL PROTECTED]
############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
