Nem állítottam be Open Relay-t.
de nem volt bekapcsolva az mx elenörzés és a host lookup.
most bekapcsoltam ez elég?
-----------------------------------------------------------
# Specify the domain you want to be added to all unqualified addresses
# here. Unqualified addresses are accepted only from local callers by
# default. See the receiver_unqualified_{hosts,nets} options if you want
# to permit unqualified addresses from remote sources. If this option is
# not set, the primary_hostname value is used for qualification.
qualify_domain = mail.xxxx.hu
# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.
# qualify_recipient =
# Specify your local domains as a colon-separated list here. If this option
# is not set (i.e. not mentioned in the configuration file), the
# qualify_recipient value is used as the only local domain. If you do not want
# to do any local deliveries, uncomment the following line, but do not supply
# any data for it. This sets local_domains to an empty string, which is not
# the same as not mentioning it at all. An empty string specifies that there
# are no local domains; not setting it at all causes the default value (the
# setting of qualify_recipient) to be used.
local_domains = localhost:mail.gjw.hu:gjw.hu:10.0.0.0:mail.xxxx.hu:xxxxx.hu
# Allow mail addressed to our hostname, or to our IP address.
local_domains_include_host = true
local_domains_include_host_literals = true
# Domains we relay for; that is domains that aren't considered local but we
# accept mail for them.
relay_domains =xx.hu:xxxxx.hu
# If this is uncommented, we accept and relay mail for all domains we are
# in the DNS as an MX for.
relay_domains_include_local_mx = true
# No local deliveries will ever be run under the uids of these users (a colon-
# separated list). An attempt to do so gets changed so that it runs under the
# uid of "nobody" instead. This is a paranoic safety catch. Note the default
# setting means you cannot deliver mail addressed to root as if it were a
# normal user. This isn't usually a problem, as most sites have an alias for
# root that redirects such mail to a human administrator.
never_users = root
# The setting below causes Exim to do a reverse DNS lookup on all incoming
# IP calls, in order to get the true host name. If you feel this is too
# expensive, you can specify the networks for which a lookup is done, or
# remove the setting entirely.
host_lookup = *
# The setting below would, if uncommented, cause Exim to check the syntax of
# all the headers that are supposed to contain email addresses (To:, From:,
# etc). This reduces the level of bounced bounces considerably.
# headers_check_syntax
# Exim contains support for the Realtime Blocking List (RBL), and the many
# similar services that are being maintained as part of the DNS. See
# http://www.mail-abuse.org/ for background. The line below, if uncommented,
# will reject mail from hosts in the RBL, and add warning headers to mail
# from hosts in a list of dynamic-IP dialups. Note that MAPS may charge
# for this service.
#rbl_domains = rbl.mail-abuse.org/reject : dialups.mail-abuse.org/warn
# http://www.rfc-ignorant.org is another interesting site with a number of
# services you can use with the rbl_domains option
# The setting below allows your host to be used as a mail relay only by
# localhost: it locks out the use of your host as a mail relay by any
# other host. See the section of the manual entitled "Control of relaying"
# for more info.
host_accept_relay = 127.0.0.1 : ::::1 :kantor.xx.hu:*.xxx.hu:
# This setting allows anyone who has authenticated to use your host as a
# mail relay. To use this you will need to set up some authenticators at
# the end of the file
#host_auth_accept_relay = *
# If you want Exim to support the "percent hack" for all your local domains,
# uncomment the following line. This is the feature by which mail addressed
# to x%y@z (where z is one of your local domains) is locally rerouted to
# x@y and sent on. Otherwise x%y is treated as an ordinary local part
# percent_hack_domains=*
# If this option is set, then any process that is running as one of the
# listed users may pass a message to Exim and specify the sender's
# address using the "-f" command line option, without Exim's adding a
# "Sender" header.
trusted_users = mail:www-data
# If this option is true, the SMTP command VRFY is supported on incoming
# SMTP connections; otherwise it is not.
#smtp_verify = true
# Some operating systems use the "gecos" field in the system password file
# to hold other information in addition to users' real names. Exim looks up
# this field when it is creating "sender" and "from" headers. If these options
# are set, exim uses "gecos_pattern" to parse the gecos field, and then
# expands "gecos_name" as the user's name. $1 etc refer to sub-fields matched
# by the pattern.
gecos_pattern = ^([^,:]*)
gecos_name = $1
# This sets the maximum number of messages that will be accepted in one
# connection and immediately delivered. If one connection sends more
# messages than this, any further ones are accepted and queued but not
# delivered. The default is 10, which is probably enough for most purposes,
# but is too low on dialup SMTP systems, which often have many more mails
# queued for them when they connect.
smtp_accept_queue_per_connection = 200
# Send a mail to the postmaster when a message is frozen. There are many
# reasons this could happen; one is if exim cannot deliver a mail with no
# return address (normally a bounce) another that may be common on dialup
# systems is if a DNS lookup of a smarthost fails. Read the documentation
# for more details: you might like to look at the auto_thaw option
freeze_tell_mailmaster = true
# This string defines the contents of the \`Received' message header that
# is added to each message, except for the timestamp, which is automatically
# added on at the end, preceded by a semicolon. The string is expanded each
# time it is used.
received_header_text = "Received: \
${if def:sender_rcvhost {from ${sender_rcvhost}\n\t}\
{${if def:sender_ident {from ${sender_ident} }}\
${if def:sender_helo_name {(helo=${sender_helo_name})\n\t}}}}\
by ${primary_hostname} \
${if def:received_protocol {with ${received_protocol}}} \
(Exim ${version_number} #${compile_number} (Debian))\n\t\
id ${message_id}\
${if def:received_for {\n\tfor <$received_for>}}"
# Attempt to verify recipient address before receiving mail, so that mails
# to invalid addresses are rejected rather than accepted and then bounced.
# Apparently some spammers are abusing servers that accept and then bounce
# to send bounces containing their spam to people.
receiver_try_verify = false
# This would make exim advertise the 8BIT-MIME option. According to
# RFC1652, this means it will take an 8bit message, and ensure it gets
# delivered correctly. exim won't do this: it is entirely 8bit clean
# but won't do any conversion if the next hop isn't. Therefore, if you
# set this option you are asking exim to lie and not be RFC
# compliant. But some people want it.
accept_8bitmime = true
# This will cause it to accept mail only from the local interface
#local_interfaces = 127.0.0.1
# If this next line is uncommented, any user can see the mail queue
# by using the mailq command or exim -bp.
#queue_list_requires_admin = false
#
end
-----------------------------------------------------
Hogy lehet leszedni magamat? :-((
Elvileg "magátol" is lekerülök?
IP: 217.166.62.186
Input IP: xx.xx.xx.186
Transport: smtp
Message Received: 2006/08/27 11:56:24 UTC
Message Sent By: anonymous
Extended Information for Transport:
MAIL FROM:
RCPT TO:
Full Message:
Received: from xx.xx.hu ([10.0.0.20] helo=spamcheck.local) by mail.xxx.hu with smtp (Exim 3.36 #1 (Debian)) id 1GHJFl-0005CV-00 for
; Sun, 27 Aug 2006 13:56:38 +0200
Message-ID:
Date: Sun, 27 Aug 2006 11:56:32 +0000
To:
Subject: Open Relay Test Message
From: spam@spamcheck.local
This message is a test of your mail server to determine if
it will perform relaying (re-sending) of e-mail messages
for unauthorized outside parties. This capability, if
enabled in your mail server, is widely considered to be
serious flaw in mail server security.
Your mail server is being tested for relaying capability
because we have received mail from it and wish to determine
its likelihood to be abused by spammers.
- 2335 megtekintés
Hozzászólások
segítsetek kikapcsolni :-(
ubject: Open Relay Test Message
From: spam@spamcheck.local
This message is a test of your mail server to determine if
it will perform relaying (re-sending) of e-mail messages
for unauthorized outside parties. This capability, if
enabled in your mail server, is widely considered to be
serious flaw in mail server security.
Your mail server is being tested for relaying capability
because we have received mail from it and wish to determine
its likelihood to be abused by spammers.
- A hozzászóláshoz be kell jelentkezni
Az exim3 már elég régi, nem valami security hiba?
Itt milyen?
http://www.abuse.net/relay.html
----------------------------------------------------------------
"A megoldas mindeki kerdesere egyszeru.
OLVASSATOK DOKUMENTACIOT!"
by thuglife
- A hozzászóláshoz be kell jelentkezni
a világ hány százaléka fogja visszadobni a leveleimet?
Az abuse nem volt jó beállítva így várhatok 1 hetet :-(
Mail relay testing
Connecting to mail.xxx.hu for anonymous test ...
<<< 220 mail.gjw.hu ESMTP Exim 3.36 #1 Mon, 28 Aug 2006 20:57:37 +0200
>>> HELO www.abuse.net
<<< 250 mail.xxx.hu Hello tuzfal.xxx.hu [10.0.0.20]
Relay test 1
>>> RSET
<<< 250 Reset OK
>>> MAIL FROM:
<<< 250 is syntactically correct
>>> RCPT TO:
<<< 250 is syntactically correct
Relay test result
Hmmn, at first glance, host appeared to accept a message for relay.
THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY.
Some systems appear to accept relay mail, but then reject messages internally rather than delivering them, but you cannot tell at this point whether the message will be relayed or not.
You cannot tell if it is really an open relay without sending a test message; this anonymous user test DID NOT send a test message.
- A hozzászóláshoz be kell jelentkezni
qmail, vagy postfix?
----------------------------------------------------------------
"A megoldas mindeki kerdesere egyszeru.
OLVASSATOK DOKUMENTACIOT!"
by thuglife
- A hozzászóláshoz be kell jelentkezni
ezt hogy érted?
Exim 3 van fent
- A hozzászóláshoz be kell jelentkezni
Szerintem arra gondolt, hogy térj át valamelyikre a kettő közül.
--
A nyúl egy igazi jellem. Ott ül a fűben, de akkor sem szívja!
- A hozzászóláshoz be kell jelentkezni
és ha azt megteszed akkor leírod hogy hogy csináltad?
- A hozzászóláshoz be kell jelentkezni
Nincs más megoldás???
- A hozzászóláshoz be kell jelentkezni
postfix lesz ;-)
- A hozzászóláshoz be kell jelentkezni
Ha kész vagy az újratelepítéssel ezzel tudod tesztelni :
- A hozzászóláshoz be kell jelentkezni
# Attempt to verify recipient address before receiving mail, so that mails
# to invalid addresses are rejected rather than accepted and then bounced.
# Apparently some spammers are abusing servers that accept and then bounce
# to send bounces containing their spam to people.
receiver_try_verify = false
Ezt ha true-ra állítod szerintem segíteni fog.Nem megfelelő címzettnek szóló levelet elfogja utasítani az exim ezek után. Próbáld ki, kíváncsi vagyok a végeredményre. Postfixet használok, korábban sendmailt.
- A hozzászóláshoz be kell jelentkezni
# If this is uncommented, we accept and relay mail for all domains we are
# in the DNS as an MX for.
relay_domains_include_local_mx = true
!!!! Ezt is kommentezd ki. !!!!
- A hozzászóláshoz be kell jelentkezni
köszi
letesztelem ezek után is
- A hozzászóláshoz be kell jelentkezni
nem megy :-( így sem
Mail relay testing
Connecting to mail.xxx.hu for anonymous test ...
<<< 220 mail.gjw.hu ESMTP Exim 3.36 #1 Tue, 29 Aug 2006 09:52:11 +0200
>>> HELO www.abuse.net
<<< 250 mail.gjw.hu Hello tuzfal.gjw.hu [10.0.0.20]
Relay test 1
>>> RSET
<<< 250 Reset OK
>>> MAIL FROM:
<<< 250 is syntactically correct
>>> RCPT TO:
<<< 250 is syntactically correct
Relay test result
Hmmn, at first glance, host appeared to accept a message for relay.
THIS MAY OR MAY NOT MEAN THAT IT'S AN OPEN RELAY.
Some systems appear to accept relay mail, but then reject messages internally rather than delivering them, but you cannot tell at this point whether the message will be relayed or not.
You cannot tell if it is really an open relay without sending a test message; this anonymous user test DID NOT send a test message.
- A hozzászóláshoz be kell jelentkezni
Hmmm. Tudom banális ?s, de az Exim-et újraindítottad? Ez esetben csak a köv. linkeket ajánlom a figyelmedbe, talán segítségedre lesz.
http://www.exim.org/howto/relay.html
http://www.exim.org/exim-html-3.20/doc/html/spec_46.html#SEC813
- A hozzászóláshoz be kell jelentkezni
ujra persze
- A hozzászóláshoz be kell jelentkezni
nalunk szoktak olyat is csinalni, hogy feliratkoznak egy spam szuro szolgaltatsra ami tulajdonkeppen annyit csinal, hogy megszurve tovabbitja a bejovo leveleket arra a mail serverre amelyikre kell. Ezutan az ugyfel a tuzfalon csak a spamt szuro szerver IP-jere esetleg az egesz IP tartomanyra engedelyezik a hozzaferest a port 25-on a tobbi IP-re nem. Ezzel 100% hogy kiszurod a relayt mindenfele keppen.
- A hozzászóláshoz be kell jelentkezni