Forgive me, have you used a online test for openrelays? For some test softwares qmail might appear as an openrelay even it is not open. There is a patch for that.
Here goes what happened: This box has been stable for more than a week - I had added q-s and ClamAV to it - and then, nothing special related to, it started logging all connections as a Relay_Client, even for local deliveries, valid messages and, of course, spammers.No. this happened in a production box.
The variable could be set by the startup-scripts of qmail-smtpd, by the tcpserve according to the IP openning the connection or it could be a default enviroment variable of the user running tcpserver or qmail-smtpd.
As far as I understand, RELAYCLIENT is analyzed by an env setting *only* and, according to log, all connections had it set.
This happened to every different hosts that were sending messages and tcpserver info showed that connections were being opened and closed, but I cannot garantee that some of them were kept opened for new connections somehow and, then, inheriting RELAYCLIENT set...
I don't think this is possible, but...
Check the general enviroment of the tcpserve process, try this command, it works in RedHat 7.3 maybe it will work in other systems..
echo ; cat "/proc/`ps ax -w | egrep tcpserve | grep -v grep | awk '{print $1}'`/environ" ; echo ; echo
You will have an output like:
PWD=/var/qmail/supervise/qmail-smtpdSHLVL=0PATH=/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin
If the RELAYCLIENT is set here, all the connections will have it set
Good luck
ST
------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
