Jonathan Vanasco said:
>
> It's not the mail relay. The email I received talked about non-mail
> relays/proxies
>
> My exim configuration allows for authenticated + encrypted outbound
> mail only. It is also quite stringent about what it will accept.
>
> AOL seems to have one of our web services, probably a tunnel from the
> webserver to the office, listed as a proxy.
Ahh..
Do you have some sort of forms cgi on that box that allows a user to send
mail to whomever they want by abusing it??
That would one of the ways your host could be used as an open relay that
most of the open relay tests can't test for.
I've had a client site that I caught doing that at the tune of more than
30,000 messages a day until they got too greedy and upped the receiptient
number past the allowable default.
ALL of the mail was pointed at AOL.
--
Kevin W. Reed - TNET Services, Inc.
Unoffical Exim MTA Info Forums -
http://exim.got-there.com/forums
