Forum OpenACS Q&A: Re: unwanted spam from my server... help.

Collapse
Posted by David Kuczek on
Hey Deds,

thanks for the reply. I am testing some settings now and I only have mydomain.com in rcpthosts, but I can still send emails to my yahoo.com address?! Why? Before that I didn't have anything written in my rcpthosts. Well I am not 100% sure because I was using the webmin interface to do it. I also restarted qmail after I mad the changes to rcpthosts.

My server is located in a hosting farm and I am the only one having access to it. How could somebody use it to spam other people and how can I test if the relay is still open?

Collapse
Posted by Sam Snow on
Places you can check to see if you are an open relay:

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=open+relay+test

Now, to your other question: You have done the correct thing with rcpthosts, but you also need to look at your /etc/tcp.smtp file (mine was really located at /etc/qmail/tcp.smtp)

See http://www.lifewithqmail.org/lwq.html#relaying for more info about how to set up this file, but it pretty much defines which computers are inside your network and you are OK with sending any mail for them-- and which ones are not.

Mine looks like this:
127.:allow,RELAYCLIENT=""
172.30.0.:allow,RELAYCLIENT=""

The first line alows localhost to send whatever mail they want. The second line allows anyone on our internal network to send any mail they want.

Sam