Search  
You are here:  Forums    
Latest Posts Minimize
RE: connection limit? by RemyV on 12-03-2008 9:28 PM
connection limit? by NateDawg on 12-03-2008 7:38 PM
RE: Multiple copies being sent + smtp 451 by gyroscopes on 12-02-2008 12:00 AM
RE: vbs script for deleting users with MLSRVX.DLL by SteveT on 12-01-2008 11:04 PM
RE: Export server and users configuration by SteveT on 12-01-2008 11:00 PM
Multiple copies being sent + smtp 451 by gyroscopes on 12-01-2008 10:02 PM
Export server and users configuration by gcvoiron on 12-01-2008 8:46 AM
RE: vbs script for deleting users with MLSRVX.DLL by krommetje on 11-30-2008 3:02 PM
I can send, but can't receive by amanda on 11-29-2008 9:26 PM
RE: reverse DNS by Elinoy on 11-26-2008 5:27 PM

Top 10 Links Minimize

ArGoStuff User to User Support Forums Minimize
Forums > General Discussion Forums > ArGoSoft Mail Server
Subject: Problem with Open Relay / Spammers
Prev Next
You are not authorized to post a reply.

Author Messages
sicnezz

Posts: 27
Online: User is Offline
ArGoNuke Swabbie
ArGoNuke Swabbie
08-24-2008 9:47 AM  
hi,

i ran the argosoft mailserver without any probs for quite a while but since today my server acts like an open relay and is being abused for spamming.
i have smtp authentification enabled but the problem is - the mailserver gets connected by my own ip - the server accepts it as trusted IP/host and so there's no authentification and spammers can send out

here's the log:

24.08.2008 14:37:57 - (   199) Connection from trusted IP address or host xx.xxx.xxx.x
24.08.2008 14:37:57 - (   199) Sending greeting...
24.08.2008 14:37:57 - (   199) 220 www.xxxxx.xxx ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.9.5)
24.08.2008 14:38:03 - (   199) HELO ks357512.kimsufi.com
24.08.2008 14:38:03 - (   199) 250 Welcome, xx.xxx.xxx.x [xx.xxx.xxx.x], pleased to meet you
24.08.2008 14:38:04 - (   199) MAIL FROM:
24.08.2008 14:38:04 - (   199) 250 Sender "patrick-cl@umail.hinet.net" OK...

i already ran spybot to check for trojans, what else could it be? is there a way to enable authentification also for the machine's ip?

thanks in advance,
tom
SteveT
Forum Administrator

Posts: 2583
Online: User is Offline
ArGoNuke Admiral
ArGoNuke Admiral
08-24-2008 10:23 AM  
Did you recently upgrade eWall? If so, also upgrade the eWall LSP. Either way cross reference the Argo Log with the eWall log. I would also remove any trusted IP address to see if there is a change in behaviour.
Top Cat Computing BOINC Team StatsRegards,
Steve Topilnycky
Top Cat Computing
http://www.topcatcomputing.com
sicnezz

Posts: 27
Online: User is Offline
ArGoNuke Swabbie
ArGoNuke Swabbie
08-24-2008 11:12 AM  
hi steve,

yes i recently updated both the mailserver + eWall to the latest version.
i just updated also the eWall LSP as suggested and rebooted the server - but still the same problem
the only thing that changed is that it now also uses 127.0.0.1 besides the machine ip. that's the only 2 ip's argo mailserver gets.

please help!
maybe it's something else.

tom
SteveT
Forum Administrator

Posts: 2583
Online: User is Offline
ArGoNuke Admiral
ArGoNuke Admiral
08-28-2008 10:50 PM  
Tom,
SSS just released a new update to eWall with some bug fixes. Try that and see if it resolves the issue.
Top Cat Computing BOINC Team StatsRegards,
Steve Topilnycky
Top Cat Computing
http://www.topcatcomputing.com
You are not authorized to post a reply.
Forums > General Discussion Forums > ArGoSoft Mail Server > Problem with Open Relay / Spammers


ActiveForums 3.7

Donations Minimize

Find our site useful? Make a donation to show your support

Donate

logo_ccMC.giflogo_ccVisa.giflogo_ccDiscover.giflogo_ccAmex.gif

ArGoStuff Supporters

 

News from ArGoSoft Minimize
1 2 3 4 5 6

Mail Server Pro v1.8.9.6
  • Improved Export to .NET function - sometimes email messages were not getting exported, because the database of email messages was not up to date. Now each folder gets rebuilt before the export function;
12/2/2008 11:19:02 PM
Email Address Validator

We have discontinued our email address validation service, and launched new web site:

http://www.emailaddressvalidator.com

It provides the web service interface to validate lists of email addresses. We hope that our service will help to reduce unwanted traffic on Internet, ensuring that mail is sent only to valid and legitimate addresses.

Sign up now, and get 150 free validations!

11/25/2008 10:13:02 AM
Mail Server v1.0.5.8

Mail Server

  • Mailbags now have an option to accept mail only when specified server is down - will help to fight with spam which attempt to deliver mail bypassing the main server;
  • When delivering mail, if main exchanger returns 4xx reply (temporary problem), the server will not try other exchangers, will retry later the main exchanger;
  • Server options moved from registry to a XML file. 64 bit versions of Vista and 2008 server appear to be having access rights problems to the Windows registry, and the change will make our server more compatible with 64 bit versions;
  • Added an option to specify the number of lines on the log screen, when using the user interface. Was causing memory problems if left running for long time;
  • Fixed couple of problems, which were showing when SQL server was set up to use case sensitive SQL statements;
  • Made changes in the remoting interface to allow logging in using aliases;

Web Interface

  • Made changes to allow logging in using aliases;
  • When viewing folders, web interface now displays the name of logged in user;
11/12/2008 2:31:31 PM
FTP Server v1.0.1.6
  • Server settings have been moved from registry to the XML file, which will be located in the common application data directory. 64 bit versions of Windows were having trouble writing into the registry; similar change is coming to the mail server;
  • If used, XML files (Users.XML, Groups.XML and ServerOptions.XML) will also be moved to the common application data directory;
11/8/2008 11:41:29 PM
FTP Server v1.0.1.5
  • When performing active data transfers on systems with multiple IP addresses, data connections were using first available IP address, rather than one on which the control connection was active. It was causing confusion with firewalls and routers;
11/2/2008 9:39:24 PM

1 2 3 4 5 6

Protect Your Computer today withGet AVG Today


Home:ArGoStuff:Forums:Articles:Cyber Security Tips:FAQ:Downloads:Links
Copyright 2006-2008 by ArGoStuff Terms Of Use Privacy Statement