Re: [exim] Open relay?

On Tue, Feb 14, 2012 at 1:22 PM, Ralph Ballier
<ralph.ballier@???> wrote:
>
>  I found this lines in mainlog:
>
> 2012-02-13 16:25:53 1Rwxmr-0003tG-09 <= havicker@??? H=(User) [4.79.231.188] P=esmtpa A=login S=1695
> I think, this is relaying.
> There is the string A=login
> Do you mean, this is the user name? But I mean, we have not a user named "login".

Below is what my logs look like when a user authenticates. Notice how
the username they authenticated with is part of the A=login: string.

2012-02-14 04:30:47 1RxA2N-0003kh-WD <= matt@???
H=c-66-41-183-88.hsd1.mn.comcast.net (OwnerPC) [66.41.183.88] P=esmtpa
A=login:matt@??? S=4046
id=2406A9DA978B495387CD35DA5E43D270@OwnerPC

It kinda sounds like you have a bug in your authentication
configuration in that it allows the smtp auth to complete without a
username. Please post your authenticator section, specifically the
"login" authenticator.

...Todd
--
SOPA: Any attempt to [use legal means to] reverse technological
advances is doomed.  --Leo Leporte