RE: testing for an open relay

["Ben Beuchler" <insyte@emt-p.org>]

OK.  The results of the machine you suggested have left me somewhat
confused.  It failed the same test as at the previous server, but I received
a message addressed to the postmaster of my domain saying that the message
double-bounced.  I included a copy.  Does this mean it is or is not relaying
via the sixth method tested?  If you have time to explain to me how you
determine your answer, I would be very appreciative.

Gracias,
Ben

----------
The phrasing, style, and content of this message are the sole property of
Ben Beuchler, Inc. and may not be reproduced in any way, shape or form
without the written consent Ben Beuchler Enterprises.  All rights reserved.
Void where prohibited by law.  Do not remove under penalty of law.  Do not
spindle or fold.  Not valid in Alaska, Hawaii, or Puerto Rico.



> -----Original Message-----
> From: John R. Levine [mailto:johnl@iecc.com]
> Sent: Monday, September 06, 1999 11:33 PM
> To: insyte@emt-p.org
> Cc: qmail@list.cr.yp.to
> Subject: Re: testing for an open relay
>
>
> >OK....  Tried that (http://maps.vix.com/tsi/ar-test.html) and I
> failed the
> >very last test.
>
> Nope, qmail gives a misleading response.  It accepts the message and then
> bounces it, since it checks only the domain at SMTP time.
>
> >> http://maps.vix.com/tsi/ar-test.html
>
> It's based on one I wrote.  For the original, which can actually send a
> little test mail, try http://www.abuse.net/relay.html.
>
> I've been meaning to make it smarter and look at the SMTP banner, see if
> it recognizes the MTA, and if so skip tests that won't give
> useful results.
>
> --
> John R. Levine, IECC, POB 727, Trumansburg NY 14886 +1 607 387 6869
> johnl@iecc.com, Village Trustee and Sewer Commissioner,
http://iecc.com/johnl,
Member, Provisional board, Coalition Against Unsolicited Commercial E-mail

---

• To: <postmaster@emergimail.com>
• Subject: failure notice
• From: <MAILER-DAEMON@emergimail.com>
• Date: Tue, 7 Sep 1999 00:36:28 -0500
• Importance: Normal

Hi. This is the qmail-send program at emergimail.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

<spamtest@emergimail.com>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 7475 invoked for bounce); 7 Sep 1999 05:36:28 -0000
Date: 7 Sep 1999 05:36:28 -0000
From: MAILER-DAEMON@emergimail.com
To: spamtest@emergimail.com
Subject: failure notice

Hi. This is the qmail-send program at emergimail.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<user-00006%abuse.net@emergimail.com>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <spamtest@emergimail.com>
Received: (qmail 7471 invoked from network); 7 Sep 1999 05:36:28 -0000
Received: from www.abuse.net (N32767-32766@208.31.42.77)
  by 205.218.58.195 with SMTP; 7 Sep 1999 05:36:28 -0000
To: user-00006@abuse.net
From: relaytest@abuse.net
Subject: Test for susceptibility to third-party mail relay
Date: Tue, 07 Sep 1999 05:35:38 GMT
Message-Id: <rlytest-936682538-4977@abuse.net>
Sender: insyte@emt-p.org
X-Sender-IP: 205.218.58.194
X-Envelope: <spamtest@[205.218.58.195]> ->
<user-00006%abuse.net@[205.218.58.195]>

This is a test of third-party mail relay, generated via the
Network Abuse Clearinghouse at http://www.abuse.net.

    Target host = 205.218.58.195
    Test performed by <insyte@emt-p.org> from 205.218.58.194

A well-configured mail server should NOT relay third-party email.
Otherwise, the server is subject to abuse by vandals and spammers,
and probable blacklisting by recipients of the unwanted third-party
e-mail.

For information on how to secure a mail server against third-party
relay, visit <URL: http://maps.vix.com/tsi/>.

---