RE: AS/400 SMTP Mail relay

I understand that the firewall has to be history.  My customer has merged
with another company and they are considering their options.

What's interesting is that if I end the SMTP server on the AS/400, I can
still TELNET to the address on Port 25 and do the HELO, MAIL FROM commands,
etc.  So I guessed that the firewall was running some kind of SMTP server.
But, if the 400 SMTP is down, I never get the mail.

I kept fooling with the ACCEPTRLY settings and eventually got it working.
Abuse.net reports that the server relays, but the email never get's sent.

Thanks.

Art Tostaine, Jr.
CCA, Inc.
Jackson, NJ 08527

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Jeffrey Silberberg
Sent: Monday, February 12, 2001 5:48 PM
To: MIDRANGE-L@midrange.com
Subject: Re: AS/400 SMTP Mail relay


Art,

        1.) Get rid of the AS/400 Firewall, Go to SonicWall, CISCO PIX,
CheckPoint VPN-1 anything !!

        2.) SMTP is passed through the Firewall unless you have the
"safemail" feature running and I did not think
              that it was ported into the AS/400 version of the IBM
Firewall.  So it's your AS/400 doing the dirty deed.

        3.) In most cases Relay is controlled by settings in the SMTP
server,  Have you searched the ISeries support
              sites for a good Tech Note, I know the Domino sites have them
not sure about native SMTP...

      Good Luck,
       Jeff...

----- Original Message -----
From: Art Tostaine, Jr. <art@link400.com>
To: <MIDRANGE-L@midrange.com>
Sent: Monday, February 12, 2001 3:05 PM
Subject: RE: AS/400 SMTP Mail relay


> My customer is using the As/400 firewall solution.  Isn't that the SMTP
> server that is talking to the internet?
>
> I guess applying PTF's to  the SMTP server won't help as CHGSMTPA has the
> name of the firewall as the mailrouter parameter and FIREWALL(*YES)
>
> Anyone have any ideas how we can stop the mail relay?
>
> Art Tostaine, Jr.
> CCA, Inc.
> Jackson, NJ 08527
>
> -----Original Message-----
> From: owner-midrange-l@midrange.com
> [mailto:owner-midrange-l@midrange.com]On Behalf Of Art Tostaine, Jr.
> Sent: Monday, February 12, 2001 1:59 PM
> To: MIDRANGE-L@midrange.com
> Subject: RE: AS/400 SMTP Mail relay
>
>
> So far I've applied SF52864 and SF53394, and I'm still able to relay.  I'm
> IPL'ing after SF53394 (shouldn't be required), just in case, but does
anyone
> else have any ideas?
>
> Art Tostaine, Jr.
> CCA, Inc.
> Jackson, NJ 08527
>
> -----Original Message-----
> From: owner-midrange-l@midrange.com
> [mailto:owner-midrange-l@midrange.com]On Behalf Of chrisw@bluechip.co.uk
> Sent: Monday, February 12, 2001 10:30 AM
> To: MIDRANGE-L@midrange.com
> Subject: Re: AS/400 SMTP Mail relay
>
>
> Go to http://www.abuse.net/relay.html to test if your mail server is an
> open relay.
>
>
>
> One of our customers AS/400 SMTP servers was used a number of time by
> spammers to relay junk mail.
>
> We installed PTF SF52864 to stop this.  Is there a way that we can test
> that
> we locked it down properly?
>
> Our ISP who shut us down said they have no way of testing it.
>
> Art Tostaine, Jr.
> CCA, Inc.
> Jackson, NJ 08527
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>
>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---