NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Spam blacklist...How to stop open relays at the firewa ll(FW-1 ) HELP!!!!!!!!!



I'm wondering if our mail servers are being exploited in the same way. Is
there any way to tell if our Exchange 5.5 server is being used by spammers?

Thanks,

John
FW-1 4.1 NT

-----Original Message-----
From: Tim Anderson [mailto:[email protected]]
Sent: Wednesday, October 24, 2001 7:24 AM
To: [email protected]
Subject: Re: [FW-1] Spam blacklist...How to stop open relays at the
firewa ll(FW-1 ) HELP!!!!!!!!!


What type of mail relay are you using?  If it is Exchange you can refuse
relaying very easily except for appropriate inbound mail.  I am sure
Sendmail has similar features.

Tim Anderson

-----Original Message-----
From: Reed Mohn, Anders [mailto:[email protected]]
Sent: Wednesday, October 24, 2001 3:48 AM
To: [email protected]
Subject: Re: [FW-1] Spam blacklist...How to stop open relays at the
firewa ll(FW-1 ) HELP!!!!!!!!!


Sorry for pointing out the obvious here, but:

The best way is, of course, to fix the mailserver.

One day, someone will find a loophole through the firewall,
and you will be up that creek again.

Cheers,
Anders :)



-----Original Message-----
From: Timothy K. Cornelius [mailto:[email protected]]
Sent: 23. oktober 2001 23:27
To: [email protected]
Subject: Re: [FW-1] Spam blacklist...How to stop open relays at the
firewall(FW-1 ) HELP!!!!!!!!!




At this time our internet mailserver(behind the FW-1) has been designated as
an open relay mailserver and has been blacklisted by several spam blocker
websites( www.orbz.org <http://www.orbz.org>  is one of them) after reading
up on how to stop this at the firewall I added two rules on the firewall
with services w/resources. the resource(SMTP->our-mail-only-in) is SMTP and
the match is coming in the sender is * and the recipient is *loi.org. The
other is going out, the resource(SMTP->our-mail-only-out) is SMTP and the
match is sender is *loi.org and the recipient is *  I have also created a
rule below these two that denies and mail service plus 2 services with
resources (SMTP->openrelay-in and SMTP->openrelay-out) these are the same as
the first two. Is this not the correct way to handle stopping an open relay
mailserver or is there a better way?


PLEASE HELP ME ASAP!!!!!!!!!!!!!!! our  mail services are just about
non-existent, except my Firewall email groups.

1 Source: any    Dest.: mailserver     Service: SMTP->our-mail-only-in
Action: accept
2 Source:mailserver    Dest: any     Service:SMTP->our-mail-only-out
Action: accept


Thanks in advance,

Tim

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.286 / Virus Database: 152 - Release Date: 10/9/2001


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.286 / Virus Database: 152 - Release Date: 10/9/2001

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.