Re: [exim] How can I tell if my server is getting bombarded …

Top Page
Delete this message
Reply to this message
Author: Tommy Butler
Date:  
To: Adam D. Barratt
CC: exim-users
Subject: Re: [exim] How can I tell if my server is getting bombarded with spam?
Adam D. Barratt wrote:
[snip]
> Note the phrase "domains for which you are prepared to accept mail from
> anywhere on the Internet". You appear to have answered "*" to that question,
> making you an instant open relay.
>
> NB The default for that question is '' (i.e. nothing). Unless you have any
> non-local domains for which you want to unconditionally accept mail from
> anywhere, it should stay that way.


Changing this has no effect.

$ telnet relay-test.mail-abuse.org
Trying 168.61.4.13...
Connected to Cygnus.Mail-Abuse.ORG.
Escape character is '^]'.
Connecting to 206.123.72.157 ...
<<< 220 noot.cityairlines.net ESMTP Exim 4.34 Wed, 15 Dec 2004 16:37:15 -0600
>>> HELO cygnus.mail-abuse.org

<<< 250 noot.cityairlines.net Hello cygnus.mail-abuse.org [168.61.4.13]
:Relay test: #Quote test
>>> mail from: <spamtest@>

<<< 501 <spamtest@>: domain missing or malformed
>>> rset

<<< 250 Reset OK
:Relay test: #Test 1
>>> mail from: <nobody@???>

<<< 250 OK
>>> rcpt to: <nobody@???>

<<< 250 Accepted
>>> QUIT

<<< 221 noot.cityairlines.net closing connection
Tested host banner: 220 noot.cityairlines.net ESMTP Exim 4.34 Wed, 15 Dec 2004
16:37:15 -0600
System appeared to accept 1 relay attempts
Connection closed by foreign host.

--
Tommy Butler
tommy@???