Re: [exim] Re: How can I tell if my server is getting bombar…

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Tommy Butler
Ημερομηνία:  
Προς: exim-users
Υ/ο: John W. Baxter
Αντικείμενο: Re: [exim] Re: How can I tell if my server is getting bombardedwith spam?
John W. Baxter wrote:
[snip]
> Yes, it's an unrecognized command.
>
> It needs to be
> RCPT TO:<nobody@???>
>
> (Exim allows a space after the colon...actually Exim also allows omitting
> the < and >. When I'm testing something like relay, I like to follow the
> RFC exactly.)


So is this helpful? I don't want to be an open relay anymore :(

root@noot:/home/remotlogin# /usr/sbin/exim4 -bh 168.61.4.13

**** SMTP testing session as if from host 168.61.4.13
**** but without any ident (RFC 1413) callback.
**** This is not for real!

>>> host in host_lookup? yes (matched "*")
>>> looking up host name for 168.61.4.13
>>> IP address lookup yielded cygnus.mail-abuse.org
>>> gethostbyname2 looked up these IP addresses:
>>> name=cygnus.mail-abuse.org address=168.61.4.13
>>> checking addresses for cygnus.mail-abuse.org
>>> 168.61.4.13 OK
>>> host in host_reject_connection? no (option unset)
>>> host in sender_unqualified_hosts? no (option unset)
>>> host in recipient_unqualified_hosts? no (option unset)
>>> host in helo_verify_hosts? no (option unset)
>>> host in helo_try_verify_hosts? no (option unset)
>>> host in helo_accept_junk_hosts? no (option unset)

220 noot.cityairlines.net ESMTP Exim 4.34 Wed, 15 Dec 2004 17:23:32 -0600
MAIL FROM: <spamtest@localhost>
250 OK
RCPT TO:<nobody@???>
>>> using ACL "acl_check_rcpt"
>>> processing "accept"
>>> check hosts = :
>>> host in ":"? no (end of list)
>>> accept: condition test failed
>>> processing "deny"
>>> check domains = +local_domains
>>> mail-abuse.org in

"@:cityairlines.net:localhost:cityairlines.net:casino-airlines.com:casinoairlines.net"?
no (end of list)
>>> mail-abuse.org in "+local_domains"? no (end of list)
>>> deny: condition test failed
>>> processing "deny"
>>> check domains = !+local_domains
>>> mail-abuse.org in "!+local_domains"? yes (end of list)
>>> check local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
>>> nobody in "^[./|] : ^.*[@%!] : ^.*/\.\./"? no (end of list)
>>> deny: condition test failed
>>> processing "accept"
>>> check local_parts = postmaster
>>> nobody in "postmaster"? no (end of list)
>>> accept: condition test failed
>>> processing "deny"
>>> check !acl = acl_whitelist_local_deny
>>> using ACL "acl_whitelist_local_deny"
>>> processing "accept"
>>> check hosts = ${if

exists{/etc/exim4/local_host_whitelist}{/etc/exim4/local_host_whitelist}{}}
>>> host in ""? no (end of list)
>>> accept: condition test failed
>>> processing "accept"
>>> check senders = ${if

exists{/etc/exim4/local_sender_whitelist}{/etc/exim4/local_sender_whitelist}{}}
>>> spamtest@localhost in ""? no (end of list)
>>> accept: condition test failed
>>> end of ACL "acl_whitelist_local_deny": implicit DENY
>>> check senders = ${if

exists{/etc/exim4/local_sender_blacklist}{/etc/exim4/local_sender_blacklist}{}}
>>> spamtest@localhost in ""? no (end of list)
>>> deny: condition test failed
>>> processing "deny"
>>> check !acl = acl_whitelist_local_deny
>>> using ACL "acl_whitelist_local_deny"
>>> processing "accept"
>>> check hosts = ${if

exists{/etc/exim4/local_host_whitelist}{/etc/exim4/local_host_whitelist}{}}
>>> host in ""? no (end of list)
>>> accept: condition test failed
>>> processing "accept"
>>> check senders = ${if

exists{/etc/exim4/local_sender_whitelist}{/etc/exim4/local_sender_whitelist}{}}
>>> spamtest@localhost in ""? no (end of list)
>>> accept: condition test failed
>>> end of ACL "acl_whitelist_local_deny": implicit DENY
>>> check hosts = ${if

exists{/etc/exim4/local_host_blacklist}{/etc/exim4/local_host_blacklist}{}}
>>> host in ""? no (end of list)
>>> deny: condition test failed
>>> processing "accept"
>>> check domains = +local_domains
>>> mail-abuse.org in "+local_domains"? no (end of list)
>>> accept: condition test failed
>>> processing "accept"
>>> check domains = +relay_to_domains
>>> mail-abuse.org in "*"? yes (matched "*")
>>> mail-abuse.org in "+relay_to_domains"? yes (matched "+relay_to_domains")
>>> check verify = recipient
>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>> routing nobody@???
>>> expansion of "${if

exists{/etc/exim4/hubbed_hosts}{partial-lsearch;/etc/exim4/hubbed_hosts}fail}"
forced failure: assume not in this list
>>> mail-abuse.org in "! +local_domains : +relay_to_domains"? yes (matched

"+relay_to_domains" - cached)
>>> R: dnslookup_relay_to_domains for nobody@???
>>> calling dnslookup_relay_to_domains router
>>> routed by dnslookup_relay_to_domains router
>>> ----------- end verify ------------
>>> accept: condition test succeeded

250 Accepted


--
Tommy Butler
tommy@???