Quote:
|
Originally Posted by deadBird
I think the even bigger problem is the "Open Relay" issue. That's basically where you don't have any authentication set up on your SMTP server, so just anyone can spam through your own SMTP server.
|
Good news! This is not the case with your mail server. How do I know this? Because I do our email admin and know how to check as follows:
telnet y-coach.com smtp
Trying 64.66.154.245...
Connected to y-coach.com (64.66.154.245).
Escape character is '^]'.
220 liza.siteprotect.com ESMTP Sendmail 8.11.6/8.11.6; Thu, 5 Feb 2004 22:24:53 -0600
ehlo y-coach.com
250-liza.siteprotect.com Hello rrcs-sw-24-153-191-251.biz.rr.com [24.153.191.251], pleased to meet you
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-SIZE 10000000
250-DSN
250-ONEX
250-ETRN
250-XUSR
250 HELP
mail from:
anyuser@y-coach.com
250 2.1.0
anyuser@y-coach.com... Sender ok
rcpt to:
jaydrake@inthecastle.com
550 5.7.1
jaydrake@inthecastle.com... Relaying denied
quit
221 2.0.0 liza.siteprotect.com closing connection
Connection closed by foreign host.
What's important to note there is the line that says "Relaying denied"
What that means is that I couldn't just fake an address and try to send mail through your mail server to myself. What you seem to be a victim of is spoofing, which means that while they send the mail through some other smtp server (not yours, possibly one that is an open relay) it appears to have come from your domain.
The bad news is that there is nothing you can do about this other than gather the email headers from the angry people who got these emails and try to track down where they really came from. Likely this won't do you any good.
The good news is MOST (and any that a sensible email administrator would use) email blacklists don't concern themselves with spoofed email like this, or at least don't blacklist the domain that was spoofed. (Because that domain had nothing to do with it and smart mail admins recognize this - and tell the less smart ones.)
What can you do about email spoofing? Nothing. Other than that, you're secure as need be.