[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Help with open relay needed
> we thought for a long time that our system (uni-paderborn.de) is fixed
> against third party relay, e.g. see the test at
> http://maps.vix.com/tsi/ar-test.html .
> Now we got surprised that we can not pass the test that ORBS.org
> is doing and that we are now to be found on some blacklist :-(
Not your case, but there also seems to be a Bad Thing(tm) in the default
configuration. It is "relaycustomer +" in the "_full_rights" definition.
It makes possible unsolicited relaying if the malicious spammer sends
you "mail from:" with your own domain. It seems that "relaycustomer"
must not be used in any normal situation. It rarely is of any usefulness,
and *always* opens a nasty hole for the spammers to creep in...