[afnog] HOW can I stop outgoing spam
Phil Regnauld
regnauld at nsrc.org
Tue Sep 27 09:58:06 UTC 2011
saleh ali (saleh.shihab) writes:
>
>
> Ok .
> When I watch log file I found a abnormal behavior .
>
> the behavior is my mail server domain is sustech.edu and I Found some email send to outside and the sender is out of my domain (edwarpor20 at yahoo.com.hk) AND i very sure that my mail server is not an open relay , see the following Lines:
You can't be 100% sure until you test it yourself from the outside, from
an untrusted IP address:
telnet myserver 25
HELO machine.i.come.from
MAIL FROM: <externaluser at otherdomain.com>
RCPT TO: <someoneelse at yetanotherdomain.com>
DATA
Subject: test open relay
testing open relay
.
> This Lines from my server log file
>
> Mail 132a1e9e79c_WE7L_149d-1 sent successfully to vcgw1.ocn.ad.jp [125.170.92.208] for [air_ship at highway.or.jp] apparently from edwardsoper20 at yahoo.com.hk (size= 1314 bytes)
>
> while the SMTP OUT it should be just from emails that inside my domain.
Do you have the log lines before and after this line ? So we can see where
the mail originates from ?
Phil
More information about the afnog
mailing list