Bill, The tool is located at: http://www.abuse.net/relay.html .
Here is the output from the actual test.(my domain name has been replaced with test.com) <<< 220 mail.test.com ESMTP >>> HELO www.abuse.net <<< 250 mail.test.com Relay test 1 >>> RSET <<< 250 flushed >>> MAIL FROM:<[EMAIL PROTECTED]> <<< 250 ok >>> RCPT TO:<[EMAIL PROTECTED]> <<< 250 ok >>> DATA <<< 354 go ahead >>> (message body) <<< 250 ok 1045679681 qp 25778 The e-mail address the e-mail was sent to was on the same server(test.com). The message successfully makes it into my inbox. Thanks again for the help Bill. Peter >===== Original Message From Bill Shupp <[EMAIL PROTECTED]> ===== >On Tuesday, February 18, 2003, at 11:06 PM, Peter Maag wrote: > >> Hey All, >> >> Was testing one of my toaster boxes today with Abuse.net�s relay >> tester(http://www.abuse.net/relay) > >This is not a valid URL. Where is this tool? > >> , and it was able to successfully deliver an open relay message to >> me.(It actually sent a message). Here is the test result: >> >> >> >> Connecting to ********** for registered user test ... >> >> <<< 220 *********** ESMTP >> >>> HELO www.abuse.net >> <<< 250 *********** >> >> Relay test 1 >> >> >>> RSET >> <<< 250 flushed >> >>> MAIL FROM:<[EMAIL PROTECTED]> >> <<< 250 ok >> >>> RCPT TO:<**************> >> <<< 250 ok >> >>> DATA >> <<< 354 go ahead >> >>> (message body) >> <<< 250 ok 1045638142 qp 20315 >> >> Relay test result >> >> Hmmn, at first glance, host appeared to accept a message for relay. >> >> THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY. >> >> >> >> >> >> >> >> The message was indeed delivered to the target address. >> >> I reread the toaster, and everything is installed just like it should >> be except for Courier IMAP, which I don�t think should make a >> difference. >> >> >> >> My /var/qmail/control/rcpthosts file contains just the domains the >> server should be hosting, and /home/vpopmail/etc/tcp.smtp contains >> just the one line that should be echo�d there during install. Any >> ideas?? > >Not with the envelope address and hostnames censored. Without that >information, it's hard to tell what was tested. > >Bill
