Dear all,

My mail server is "relay3.csie.ncu.edu.tw" and my access file
doesn't
open relay, just open localhost. Moreover, I have install the
Cyrus-sasl for
AUTH, but i don't know why this guy can relay the mail without AUTH.

The following is the maillog. Can anyone explain for me? ^^"

----
Jan 21 00:52:52 relay sendmail[12197]: l0KGp8wd012197:
from=<dqh@relay3.csie.ncu.edu.tw>, size=696, class=0, nrcpts=1,
msgid=<200701201652.l0KGp8wd012197@relay.csie.ncu. edu.tw>, proto=ESMTP,
daemon=MTA, relay=201-1-110-127.dsl.telesp.net.br [201.1.110.127]
Jan 21 00:52:52 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Virus-Scanned: ClamAV 0.88.6/2467/Sat Jan 20 12:42:15 2007 on
relay.csie.ncu.edu.tw
Jan 21 00:52:52 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Virus-Status: Clean
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Spam-Flag: YES
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Spam-Status: Yes, score=15.6 required=9.0
tests=FORGED_MUA_OUTLOOK,\r\n\tMIME_BASE64_TEXT,RC VD_IN_DSBL,RCVD_IN_NJABL_DUL,RCVD_IN_NJABL_PROXY,\ r\n\tRCVD_IN_SORBS_DUL,RCVD_IN_SORBS_SOCKS,RCVD_IN _XBL
autolearn=disabled \r\n\tversion=3.1.7
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Spam-Report: \r\n\t* 1.5 MIME_BASE64_TEXT RAW: Message text
disguised using base64 encoding\r\n\t* 0.3 RCVD_IN_NJABL_PROXY RBL:
NJABL: sender is an open proxy\r\n\t* [201.1.110.127 listed in
combined.njabl.org]\r\n\t* 3.1 RCVD_IN_XBL RBL: Received via a relay
in
Spamhaus XBL\r\n\t* [201.1.110.127 listed in
sbl-xbl.spamhaus.org]\r\n\t* 1.8 RCVD_IN_SORBS_SOCKS RBL: SORBS:
sender
is open SOCKS proxy server\r\n\t* [201.1.110.127 listed in
dnsbl.sorbs.net]\r\n\t* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent
directly
from dynamic IP address\r\n\t* [201.1.110.127 listed in
dnsbl.sorbs.net]\r\n\t* 1.8 RCVD_IN_DSBL RBL: Received via a relay in
list.dsbl.org\r\n\t*
[<http://dsbl.org/listing?201.1.110.127>]\r\n\t* 1.7 RCVD_IN_NJABL_DUL
RBL: NJABL: dialup sender did non-local SMTP\r\n\t* [201.1.110.127
listed in combined.njabl.org]\r\n\t* 3.4 FORGED_MUA_OUTLOOK Forged
mail
pretending to be from MS Outlook
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Spam-Level: ***************
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter add:
header: X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
\r\n\trelay.csie.ncu.edu.tw
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter change:
header Subject: from =?GB2312?B?1/a49sXz09EsIMjnus4/?= to [SNMG
Possible
SPAM]: =?GB2312?B?1/a49sXz09EsIMjnus4/?=
Jan 21 00:52:54 relay sendmail[12197]: l0KGp8wd012197: Milter message:
body replaced
Jan 21 00:52:54 relay sendmail[12296]: l0KGp8wd012197:
to=<zhaolanzhaolan@hotmail.com>, delay=00:00:05, xdelay=00:00:00,
mailer=esmtp, pri=30696, relay=mx4.hotmail.com. [65.54.245.104],
dsn=5.1.1, stat=User unknown
Jan 21 00:52:55 relay sendmail[12296]: l0KGp8wd012197: l0KGqtwQ012296:
DSN: User unknown

.... ciao:

doing an advanced google search with 'must_hve=test' and
'exact_match="mail relay"' offers a long list of web based tests for open
mail relays.

for example: "www.abuse.net/relay.html".


--
.... i'm a man, but i can change,
if i have to , i guess ...

You are not an open relay.

220 relay.csie.ncu.edu.tw ESMTP Sendmail 8.13.8/8.13.8; Sun, 28 Jan 2007 13:16:19
+0800 (CST)
mail from:jbeasley@freeshell.org
250 2.1.0 jbeasley@freeshell.org... Sender ok
rcpt to:jbeasley@freeshell.org
550 5.7.1 jbeasley@freeshell.org... Relaying denied. Proper authentication required.
quit
221 2.0.0 relay.csie.ncu.edu.tw closing connection

--
jbeasley@sdf.lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org