Re: [Exim] Re: Open Relay ?

Top Page
Delete this message
Reply to this message
Author: Dave C.
Date:  
To: Suresh Ramasubramanian
CC: Exim Users, Odhiambo G. Washington
Subject: Re: [Exim] Re: Open Relay ?
On Sat, 2 Mar 2002, Suresh Ramasubramanian wrote:

> +++ Odhiambo G. Washington [exim-users] <01/03/02 16:58 +0300>:
> > I have a problem that I haven't quite encountered before and which is a bit
> > confusing. Somehow juno.com found a loop in my SMTP server and exploited it.
>
> Pardon? Juno is a rather large ISP. And they hate spam.


Probably the sender-smtp is saying "HELO juno.com", and that it really
isn't juno.com connecting to him..

Hint: look at the _numeric IP address_, and use the IP registray whois
and/or in-addr.arpa lookup to find out what host is _really_ connecting
to you..


>
> > I had to explicitly block *.juno.com but not before my server's IP was in
> > orbz/ordb. Now I can see hundreds of attempts from juno with different
>
> Post some headers ... and what exploit is your server relaying for?
>
>     -srs

>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim details at http://www.exim.org/ ##
>
>


--