LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 08-11-2004, 06:21 PM   #1
linuxboy69
Member
 
Registered: Oct 2003
Distribution: Redhat 9
Posts: 138

Rep: Reputation: 15
how to tell if getting unauthorized mail relaying?


I am really new to mail administration and I need some help. I am running sendmail version 8.11.6 and in my root mail I get messages saying that there were problems sending out some mail messages. it is not email that I send out and it looks like spam. I am only allow relaying through a couple domains and I assumed that all other relays would be rejected. Is this true? How can I tell how secure my sendmail daemon is?

Any help is greatly appreciated. Thanks in advance.
 
Old 08-11-2004, 06:29 PM   #2
Pete M
Member
 
Registered: Aug 2003
Location: UK
Distribution: Redhat 9 FC 3 SUSE 9.2 SUSE 9.3 Gentoo 2005.0 Debian Sid
Posts: 657

Rep: Reputation: 31
linuxboy69

This web site will give some idea
Open Relay Test

Also check your mail logs

Pete
 
Old 08-11-2004, 06:36 PM   #3
SheldonPlankton
Member
 
Registered: Jun 2004
Posts: 129

Rep: Reputation: 15
I am new to mail admin. too and I have seen how to use telnet to send email. If I am wrong could someone please correct me.

Code:
spammer $ telnet yoursystem 25
Trying XXX.XXX.XXX.XXXX...
Connected to yoursystem.
Escape character is '^]'.
220 localhost.localdomain ESMTP Sendmail 8.12.8/8.12.8; Wed, 11 Aug 2004 04:41:06 -0700
HELO whatever
250 localhost.localdomain Hello localhost.localdomain [127.0.0.1], pleased to meet you
MAIL FROM:somebody@whocares
250 2.1.0 somebody@whocares... Sender ok
RCPT TO:sheldonplankton@yahoo.com
250 2.1.5 sheldonplankton@yahoo.com... Recipient ok
DATA
354 Enter mail, end with "." on a line by itself
blah
balh balh blah balh

Cool site
http://raider.muc.edu/~kirchmjf/SP20...SMTPSample.htm
.
250 2.0.0 i7BBf6aF002955 Message accepted for delivery
QUIT
221 2.0.0 localhost.localdomain closing connection
Connection closed by foreign host.
bash-2.05b$
 
Old 08-12-2004, 01:46 PM   #4
linuxboy69
Member
 
Registered: Oct 2003
Distribution: Redhat 9
Posts: 138

Original Poster
Rep: Reputation: 15
Thank you for replying

I did the relay testing and all of the tests were denied. I guess that is a good thing but I am still baffled as to how I get these strange messages in my mail box??
 
Old 08-12-2004, 02:05 PM   #5
Pete M
Member
 
Registered: Aug 2003
Location: UK
Distribution: Redhat 9 FC 3 SUSE 9.2 SUSE 9.3 Gentoo 2005.0 Debian Sid
Posts: 657

Rep: Reputation: 31
linuxboy69

What you may be seeing are failed attempts to relay through your server, I get them all the time sometimes in large numbers

Spammers are always on the look out for open relays so it pays to keep your eye on the mail logs and not get complacent

Pete
 
Old 08-12-2004, 04:45 PM   #6
linuxboy69
Member
 
Registered: Oct 2003
Distribution: Redhat 9
Posts: 138

Original Poster
Rep: Reputation: 15
ok, thanks for the tip!!!

Last edited by linuxboy69; 08-12-2004 at 04:47 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Relaying denied when sendig mail outside Wynand1 Linux - Networking 5 09-15-2004 12:59 AM
Mail Relaying....any idea rabeea Linux - Networking 1 08-17-2004 07:36 AM
Postfix relaying mail to internal mail server tradecraft1 Linux - Networking 2 10-28-2003 04:01 PM
Redhat 9 Mail Relaying Problem clintonm9 Linux - Software 2 06-23-2003 03:54 PM
Mail relaying across networks? TruckStuff Linux - Networking 1 08-29-2002 06:34 PM


All times are GMT -5. The time now is 03:09 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration