[Tfug] Qmail and Open Relay

[Andrew Ayre]

Hi Jon,

Currently no connections to port 25, but I'll keep checking. The spam comes
from different IP addresses. I'm not sure how many different ones are
involved.

Is it possible to run a script on each connection to port 25 without
affecting qmail? Maybe by editing tcp.smtp?

Andy


-----Original Message-----
From: tfug-bounces at tfug.org [mailto:tfug-bounces at tfug.org]On Behalf Of
Jon
Sent: Friday, June 08, 2007 4:23 PM
To: Tucson Free Unix Group
Subject: Re: [Tfug] Qmail and Open Relay


Andrew Ayre wrote:
> Jon,
>
> 64011 = qmaild
> 64020 = vpopmail
>
> If it is a contact form would the emails appear with:
>
>   Received: from 202.99.204.66 by h0000000 (envelope-from <>, uid 64011)
> with qmail-scanner-1.25st
>
> The IP address 202.99.204.66 is not ours. It appears to be somewhere in
> China.
>
> Andy
>
>
hhhmm. I can understand why qmaild is listed in there but not vpopmail.
So to answer your question no it wouldn't to the best of my knowledge.

When you do a 'netstat -an' do you show a lot of connections from
randomly high ports to your IP on port 25? Are these messages always
coming from the same IP?

--
Jon

_______________________________________________
Tucson Free Unix Group - tfug at tfug.org
Subscription Options:
http://www.tfug.org/mailman/listinfo/tfug_tfug.org