Re: [vchkpw] How can I identify a spammer?

Walter Souto R. Junior Fri, 22 Oct 2004 15:07:10 -0700

Thanks Tom and Jeremy,

I do fix my run file for smtp, but now I have a "501 malformed auth input (#5.5.4)" using telnet. I'm also trying with Opera with plain, auth and cram-md5 without success. My run file looks like:

#!/bin/sh

LOCAL=`head -1 /var/qmail/control/me`

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`

MAXSMTPD=`/bin/cat /var/qmail/control/concurrencyincoming`

exec /usr/local/bin/softlimit -m 15000000 \
/usr/local/bin/tcpserver \
    -H -l $LOCAL \
    -v -x /etc/tcp.smtp.cdb \
    -c $MAXSMTPD -R -u $QMAILDUID -g $NOFILESGID 0 smtp \
/var/qmail/bin/qmail-smtpd $LOCAL /home/vpopmail/bin/vchkpw /bin/true 2>&1

On Fri, 22 Oct 2004 12:04:04 -0500, Jeremy Kitchen <[EMAIL PROTECTED]> wrote:

On Friday 22 October 2004 10:33 am, Walter Souto R. Junior wrote:

Received: (qmail 5098 invoked by uid 1010); 22 Oct 2004 11:46:22 -0200
Received: from [EMAIL PROTECTED] by alonso.bayweb.biz by uid 0
with qmail-scanner-1.22
  (clamdscan: 0.74. spamassassin: 2.63.


as Tom pointed out, you are an open relay:
[EMAIL PROTECTED] ~ $ telnet   alonso.bayweb.biz 25
Trying 69.0.231.11...
Connected to ns1.bayweb.biz.
Escape character is '^]'.
220 alonso.bayweb.biz ESMTP
ehlo bob
250-alonso.bayweb.biz
250-AUTH LOGIN CRAM-MD5 PLAIN
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-STARTTLS
250-PIPELINING
250 8BITMIME
auth login
334 VXNlcm5hbWU6
jkflds
334 UGFzc3dvcmQ6
jlfds
235 ok, go ahead (#2.0.0)
quit
221 alonso.bayweb.biz
Connection closed by foreign host.

http://homepages.tesco.net/~J.deBoynePollard/FGA/qmail-promiscuous-smtp-auth-misconfiguration.html

-Jeremy


Thanks,
--
Walter.

Re: [vchkpw] How can I identify a spammer?

Reply via email to