RE: AS/400 sending email

["Metz, Zak" <Zak_Metz@xxxxxx>]

You're system is likely an open relay which allows anyone to send e-mail
through it and you've unwittingly become party to spam distribution.
Search the archives on "open relay" for details of how to prevent it.
The option to control it is in CHGSMTPA, "Allow relayed mail," but the
nuances of controlling it may require a bit of reading. There are many
services that detect open relay servers and will blacklist you from
sending, so you'll want to fix it soon (ask me how I know...). Alas,
nobody "hacked in," they just sent stuff through your system which means
they know your systems IP address, nothing more.

> -----Original Message-----
> From: Leif Svalgaard [mailto:leif@xxxxxxxx]
> Sent: Wednesday, August 06, 2003 10:24 AM
> To: Midrange List Tech
> Subject: AS/400 sending email
> 
> 
> Hi Folks,
> Curious thing happened last night.
> My AS/400 (having an IP address for remote VPN access) sent out
> 1800 emails at 1:30 am. This information comes to me from the
> "commutations guy" (not me) that handles the network. 
> 1) nobody that I know of sent the emails
> 2) can one see a log or some such to investigate
> 3) the comm guy said "someone hacked in and used the AS/400
> to send email". My reply: this is supposed to be hard to do.
> Am I really correct, faced with the above evidence?
> 
> Thanks
NOTICE: This E-mail may contain confidential information. If you are not
the addressee or the intended recipient please do not read this E-mail
and please immediately delete this e-mail message and any attachments
from your workstation or network mail system. If you are the addressee
or the intended recipient and you save or print a copy of this E-mail,
please place it in an appropriate file, depending on whether
confidential information is contained in the message.