From owner-freebsd-questions@FreeBSD.ORG Thu Jun 19 06:36:48 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 69F4C37B401 for ; Thu, 19 Jun 2003 06:36:48 -0700 (PDT) Received: from vixen.pragma.no (rudolph.pragma.no [212.20.194.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 440C243F3F for ; Thu, 19 Jun 2003 06:36:47 -0700 (PDT) (envelope-from awand@pragma.no) Received: from vable.pragma.no (DNSSPOOFER [212.20.194.160]) by vixen.pragma.no (Netscape Messaging Server 4.15) with ESMTP id HGQDSW00.HBI; Thu, 19 Jun 2003 15:36:32 +0200 Message-Id: <5.2.0.9.0.20030619150558.029c9888@mail.pragma.no> X-Sender: awand@mail.pragma.no X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9 Date: Thu, 19 Jun 2003 15:36:32 +0200 To: Fernando Gleiser From: Andreas =?iso-8859-1?Q?Wider=F8e?= Andersen In-Reply-To: <20030619094727.W61487-100000@cactus.fi.uba.ar> References: <5.2.0.9.0.20030619141344.02971008@mail.pragma.no> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable cc: freebsd-questions@FreeBSD.ORG Subject: Spamassassin question [was Re: Do I have an open relay?] X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Jun 2003 13:36:48 -0000 At 09:50 19.06.2003 -0300, Fernando Gleiser wrote: >On Thu, 19 Jun 2003, Andreas Wider=F8e Andersen wrote: > > > Hi, > > I'm a bit nervous here. Recently I've started getting 20-25 mails to my > > Postmaster account on my FreeBSD 4.8RC server running Sendmail > > 8.12.8/8.12.8 each day with a message to Postmaster that the mail could= not > > be delivered. > >Sendmail by default does not relay, unless you enable PROMICUOUS_RELAY. >To test if you have an open relay, go to: http://www.abuse.net/relay.html >and run a test against your server. > >It may be a "rumplestinkin attack", the spammers are trying to guess >account names in your server, postmaster gets a copy of the bounce. Look >at the logs for the full info. Thanks! All tests performed, no relays accepted. My access file only contains a=20 list of domains I reject: ## $FreeBSD $ ## ## Mail relay access control list. Default is to reject mail unless the ## destination is local, or listed in /etc/mail/sendmail.cw ## #cyberspammer.com 550 We don't accept mail from spammers #FREE.STEALTH.MAILER@ 550 We don't accept mail from spammers #another.source.of.spam REJECT #okay.cyberspammer.com OK #128.32 RELAY bossgame.com 550 We don't accept mail from spammers intellectualfantasy.com 550 We don't accept mail from spammers ... and so on... Will Spamassassin only work on mails that are delivered to account on the=20 server it runs (locally), or can it also work for mailinglists in Ie.=20 /etc/mail/aliases that are being forward to other mailaccounts around the=20 globe? /Andreas --- Andreas Wider=F8e Andersen Pragma AS http://www.pragma.no=20