[wplug] open relays

[Patryk Laurent]

One way to check to see if it was an open relay would be to telnet to
the box on its SMTP port, and try to send "fakemail" through it;
basically you would type something like this:

user$ telnet myfriends.box.com 25
helo patrykfake.com
mail from:fakeuser at patrykfake.com
rcpt to:jmh17 at pitt.edu
data
This is a test message
If this gets accepted for delivery, then myfriends.box.com is an open
relay, because there's no way it should be delivering this message.
.


That should do it.  You may also want to try sending fake mail with the
same method from a fake pitt.edu address (like fakeuser at pitt.edu).

Good luck,
Patryk




On Wed, 2002-12-18 at 14:10, John Harrold wrote:
> hey folks.
> 
> i have a friend who is having sendmail woes. the university is telling him
> that his computer is set up as an open relay. to test this i went to 
> 
> http://www.abuse.net/relay.html
> 
> and it said his computer was clean. he spoke with the abuse people at pitt,
> and they said that abuse.net can be wrong, but offered no way to verify
> this statement.
> 
> i wanted to see if he had been rooted, so i ran chkroot and that found
> nothing. 
> 
> so this is my question, how can i verify he is not an open relay? what
> should i look for in the sendmail config files to determine this?
> 
> 
> -- 
> ---------------------------------------------------------------
> john harrold               | "They that can give up essential  
>      jmh17+maps at pitt.edu   |  liberty to obtain a little       
> /"\                        |  temporary safety deserve neither 
> \ / ASCII ribbon campaign  |  liberty nor safety."             
>  X  against HTML mail      |                                  
> / \                        |  Benjamin Franklin
> ---------------------------------------------------------------
> google is everything to everybody

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://penguin.wplug.org/pipermail/wplug/attachments/20021218/e804a743/attachment-0001.bin