Page 1 of 1

SMTP open relay problem

Posted: Fri Dec 28, 2007 11:30 am
by mvrk
Hello,

I've got a scalix server runing for a long time, and i've detected a strange situation.

i can telnet to the smtp port (25) and send mail to my own mail domain without authenticating...
if i try any other domain fails (which is what i want)
but i want to force authentication also for my own mail domain...


EXAMPLE:

220 "My Mail Domain - SMTPd"
helo xpto.com
250 mail.mymaildomain.com Hello [84.91.76.77], pl
mail from: re@xpto.com
250 re@xpto.pt... Sender ok
rcpt to: xpto@gmail.com
550 Denied due to spam list
rcpt to: xpto@mymaildomain.com
550 5.1.1 xpto@mymaildomain.com... User unknown
rcpt to: testuser@mymaildomain.com
250 2.1.5 testuser@mymaildomain.com... Recipient ok




my smtpd.cfg:

GREETING="My Mail Domain - SMTPd"

EXTENSIONS=AUTH,DSN,8BITMIME

SMTPFILTER=TRUE
RELAY accept 127.0.0.1
RELAY accept .mymaildomain.com
RELAY Log_Reject ALL

RECIPIENT Log_Reject *@*@*
RECIPIENT Log_Reject *%*
RECIPIENT Log_Reject *!*
RECIPIENT Log_Reject *#*@*

Posted: Wed Jan 02, 2008 3:46 am
by Valerion
The RELAY accept .mymaildomain.com will accept without requiring authentication. Remove that and you will be good to go.

You won't receive mail from others on the Internet for anything going to that account, though, since they won't be able to authenticate.