Re: [courier-users] is my server a relay?

This is a MIME GnuPG-signed message. If you see this text, it means that
your E-mail or Usenet software does not support MIME signed messages.
The Internet standard for MIME PGP messages, RFC 2015, was published in 1996.
To open this message correctly you will need to install E-mail or Usenet
software that supports modern Internet standards.

--=_mimegpg-commodore.email-scan.com-20167-1135725907-0002
Content-Type: text/plain; format=flowed; charset="US-ASCII"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Seth Lane writes:

> I did some testing and this email from abuse.net apparently thinks I am
> although for the life of me I can't figure out how. I am also getting
> several "bounced" emails/day from Postmasters which I know I didn't send
> email too.

Me too. This is called "backscatter" of forged spam.

I semi-automatically blacklist any mail server that bounces anything to me
something that I did not send. This is considered a security hole on the
temporary Internet.

My blacklist is up to a couple of thousand IP address, now.

> I went to the URL at bottom but nothing on Courier there. I
> know Courier is supposed to stop relaying by default but then how did this
> email get to me and why am I getting bounced emails for emails I never
> sent?
>
> Here's the email from abuse.net which tested relaying:
>
> Delivered-To: slane@ping-us.com
> Return-Path: <spamtest@abuse.net>
> Received: from www.abuse.net (www.abuse.net [::ffff:208.31.42.77])
> by www.ping-us.com with esmtp; Tue, 27 Dec 2005 07:19:20 -0800
> To: slane@ping-us.com
> From: securitytest@abuse.net
> Subject: Test for susceptibility of ping-us.com to third-party mail relay
> Date: Tue, 27 Dec 2005 15:10:08 GMT
> Message-Id: <rlytest-1135696208-20670@abuse.net>
> Sender: slane@ping-us.com
> X-Sender-IP: 162.84.183.84
> X-Envelope: <spamtest@abuse.net> -> <slane@ping-us.com>
>
> This is a test of third-party mail relay, generated via the
> Network Abuse Clearinghouse at http://www.abuse.net.
>
> Target host = www.ping-us.com [207.234.130.23]
> Test performed by <slane@ping-us.com> from 162.84.183.84
>
> A well-configured mail server should NOT relay third-party email.
> Otherwise, the server is subject to abuse by vandals and spammers,
> and probable blacklisting by recipients of the unwanted third-party
> e-mail.
>
> For information on how to secure a mail server against third-party
> relay, visit <URL: http://www.mail-abuse.com/support/an_sec3rdparty.html>.

There's nothing above that suggests that your server is an open relay.



--=_mimegpg-commodore.email-scan.com-20167-1135725907-0002
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQBDsc1Tx9p3GYHlUOIRAgQtAJ4uq2ikH8YTYvz9uzWcUp yFKyqY7wCeNFXt
ckRA2QV6IzgQT9VKvRE58Uw=
=542L
-----END PGP SIGNATURE-----

--=_mimegpg-commodore.email-scan.com-20167-1135725907-0002--


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users