Re: fix.your.open.relay.or.die.net

["Jim Franz" <franz400@xxxxxxxxxxxx>]

our network was used for smtp relay for a while (an nt in the network had a
"custom" smtp program, operating on a diff port). It would wake up at 8pm
and run all night till 7 am. We found out when i tried to access the 400 at
night and the local network was flooded running the smtp. took the net admin
a week to find all the pieces to kill.
jim franz
----- Original Message -----
From: "R. Bruce Hoffman, Jr." <rbruceh@attglobal.net>
To: <midrange-l@midrange.com>
Sent: Tuesday, November 20, 2001 6:50 PM
Subject: Re: fix.your.open.relay.or.die.net


> ----- Original Message -----
> From: "Fritz Hayes" <fhayes@spiritone.com>
> To: <midrange-l@midrange.com>
> Sent: Tuesday, November 20, 2001 6:13 PM
> Subject: RE: fix.your.open.relay.or.die.net
>
>
> > POP3 or IMAP.  How would you propose setting up the SMTP server on the
> > AS/400 or Domino to service these users without the user/password
> > technique?
>
> It's not really something that _should_ be done on the 400 or any other
smtp
> server (sendmail, etc.).
>
> It's something your firewall should do at a minimum.
>
> Two ways: NO access from outside networks, just filter off port 25
> the other - allow access only from specific static IP addresses. ATT and
> some of the other big players do this, which is why you have to dial in to
> their systems and use their assigned addresses in order to access their
smtp
> servers.
>
> The idea is that you should not allow access to _any_ smtp server from
> unrestricted/uncontrolled hosts.
>
> ===========================================================
> R. Bruce Hoffman, Jr.
>  -- IBM Certified Specialist - AS/400 Administrator
>  -- IBM Certified Specialist - RPG IV Developer
>
> "I want to be different, just like everybody else!"
>   - Ceili Rain
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>