Re: Spam relaying problem NOT fixed -- DOMINO400

Shane,
The "problem" has been there all along. Two weeks ago a spammer found
your unsecured site and started leveraging it. I strongly recommend you
read the following instructions
http://notes.net/today.nsf/f01245ebfc115aaf8525661a006b86b9/ec1febc54952ff3e85256818007c9a2f?OpenDocument

This article explains step by step how to stop your Domino server from
excepting mail for relay (SPAM).

Walter Scanlan
Advisory Software Engineer
Domino for AS/400 Team Leader
Phone 507-286-6088
Fax 507-286-5028
Internet wscanlan@us.ibm.com

"Shane D. Rowe at

HICI" To: <DOMINO400@midrange.com>

<srowe@hici.net> cc:

Sent by: Subject: Spam relaying problem
NOT fixed
owner-domino400@mi

drange.com

05/30/2001 12:30

Please respond to

DOMINO400

It's me again!

Remember that spam relaying problem from last week concerning our Domino
email server being used to relay spam mail? The problem had appeared to be
fixed by late Thursday of last week. However, today some people sending us
mail have been rejected by our server. What happened???!! Last Friday, we
were sending and receiving email from legitimate parties and we were not
relaying spam mail. To refresh you, we had to put the mail server's IP
address and our users' IP's in the "Allow messages only from the following
external internet hosts to be sent to external internet domains: ". That
seemed to be working fine. But as of today, some emails directed to us are
being rejected due to "policy reasons".

I had one person call saying they could not send us an email. The message
they were receiving was "Server Error: 554; Rejected for Policy Reasons".
I removed the IP addresses from the "Allow messages. . . ." field and
watched the console messages as this person sent the message again.
Everything came through just fine. But because I had to remove those IP
address entries, now we're open to relaying spam again. In looking at the
log files, some messages were allowed through, but sometimes, the smtp
server showed "0 messages received" once it was contacted by an external
computer. I also know that our messages to various email groups, such as
the yahoo groups, are being bounced back with the same rejection code and
policy reasons message. Does anyone have any ideas on what to try now?
Any suggestions would be greatly appreciated. I really need help on this
one!

We are running Domino 5.0.1 on OS/400 V4R4. This problem just began about
2 weeks ago. We have made no configuration changes or added/removed
software/hardware.

Thanks for your time,
Shane D. Rowe
Systems Specialist
Haulers Insurance Company, Inc.

+---
| This is the Domino/400 Mailing List!
| To submit a new message, send your mail to DOMINO400@midrange.com.
| To subscribe to this list send email to DOMINO400-SUB@midrange.com.
| To unsubscribe from this list send email to DOMINO400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: meechamw@ptd.net
+---