Not openrelay, but Spam Mails

[Jan Novak]

Hi,

i have tested my mailservber as openrelay. It isn't. So far so good.
But in mail log i see mails like

[something-what-is-no-mailbox-or-alias]@[mydomain] ->
***@in-the-world was sending through my mailserver.

Why can be this happen ?

Jan

[Burkhard Ott]

Post by Jan Novak
Hi,
i have tested my mailservber as openrelay. It isn't. So far so good.
But in mail log i see mails like
Why can be this happen ?
Jan

What's your server IP?
What do you have enabled as trusted networks?

I have seen once a guy who was wondering about a similar issue, he had an
RFC1918 address in trusted networks but source natted on the firewall, so
the incoming traffic was natted to a 1918 address and of course accepted.
Check on that as well.

cheers

[Jan Novak]

Hi Burkhard,

it was an hacked adresse of mail user..
This hole was closed and now it looks like before :-)

Thanks

Post by Burkhard Ott

Post by Jan Novak
Hi,
i have tested my mailservber as openrelay. It isn't. So far so good.
But in mail log i see mails like
Why can be this happen ?
Jan

What's your server IP?
What do you have enabled as trusted networks?
I have seen once a guy who was wondering about a similar issue, he had an
RFC1918 address in trusted networks but source natted on the firewall, so
the incoming traffic was natted to a 1918 address and of course accepted.
Check on that as well.
cheers