Subject: Re: mail to ncrnko@jps.net
To: None <netbsd-users@netbsd.org>
From: Wolfgang Rupprecht <wolfgang@wsrcc.com>
List: netbsd-users
Date: 02/14/2001 05:36:49
wojtek@wojtek.from.pl writes:
> Feb 12 07:13:36 wojtek sendmail[3229]: f1ADXVm03046: to=<ncrnko@jps.net>,
> ctladdr=<wojtek@wojtek.from.pl> (1000/100), delay=1+16:39:48, xdelay=00:00:23,
> mailer=esmtp, pri=5190677, relay=smtp3.jps.net. [63.208.208.81],
> dsn=4.3.0, stat=Deferred:
> 451 Open relay output - see http://www.orbs.org/verify.php3?address=212.45.238.198
ORBS is trivial to get out of. Just configure your mailer to not
relay for *anyone* and go to www.orbs.org and request another test.
If you do allow any relaying, then be absolutely certain that the
folks you relay for won't screw you by allowing mail to relay from
their machine to yours. This would make you the second hop of a
multi-hop relay.
ORBS has this piece of relayed mail on file (at
http://lookup.orbs.org/messagelookup.php3?address=195.117.150.159).
If this wasn't your system it was from the previous owner of that IP
address.
195.117.150.159 : 2001-01-27 20:35:37 UTC
From sender@orbs.org Sun Jan 28 09:43:20 2001
Received: from promet.pl (N212045238198.unregistered.formus.pl [212.45.238.198])
by mail2.manawatu.net.nz (8.9.3/8.9.3) with ESMTP id JAA08895
for <orbs-relaytest@manawatu.co.nz>; Sun, 28 Jan 2001 09:42:23 +1300
X-Remote-IP: 212.45.238.198
Received: from tester42.orbs.org ([62.250.3.55]:22791 "HELO
relaytest.orbs.vuurwerk.nl") by promat1.promat.pl with SMTP
id <S8584AbRA0VVs>; Sat, 27 Jan 2001 22:21:48 +0100
To: orbs-relaytest@manawatu.co.nz
From: sender@orbs.org
X-Token: grdefqrdkvnmpgtv
X-Envelope-Sender: <sender@orbs.org>
X-Envelope-Recipient: <orbs-relaytest@manawatu.co.nz>
Message-Id: <195.117.150.159@orbs.org>
Subject: ORBS Relay Test - 195.117.150.159
Date: Sat, 27 Jan 2001 22:21:48 +0100
This program checks for open relays.
Open relays are automatically added to the ORBS Open Relay
Database (see http://www.orbs.org/ for details).
Check http://www.orbs.org/verify.php3?address=195.117.150.159 for this hosts current status.
Vulnerability checks are detailed at http://www.orbs.org/envelopes.html
Securing help can be found at http://www.orbs.org/otherresources.html
There are multiple tests applied per IP address.
Partially secured hosts may pass some tests, but fail others.
Hosts are only classified as secure by ORBS if they pass all tests.
Hosts which do not deliver messages are not classified as insecure.
Do not use the above addresses to contact me - use admin@orbs.org.
X-Token: grdefqrdkvnmpgtv
X-Envelope-Sender: MAIL FROM:<sender@orbs.org>
X-Envelope-Recipient: RCPT TO:<orbs-relaytest@manawatu.co.nz>
--
Wolfgang Rupprecht <wolfgang+gnus@dailyplanet.wsrcc.com>
http://www.wsrcc.com/wolfgang/
Coming soon: GPS mapping tools for Open Systems. http://www.gnomad-mapping.com/