<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 5/17/2013 8:51 AM, David Thacker
wrote:<br>
</div>
<blockquote cite="mid:72A3FB291CC94F7889B57A07C13DF6B3@TNTXP"
type="cite">
<blockquote type="cite">
<pre wrap="">I think if you set the option to "Delay Checks" then they could still
send.
</pre>
</blockquote>
<pre wrap="">
Greetings Ken,
That's what I thought as well, but not what I actually observed on my
BX5107 servers.
I do not use the AV-SPAM package, I use a hosted MX based spam & AV filter
service instead. To address the spammers' attempts to bypass the mx filter
by connecting directly to my SMTP, I added zen.spamhaus.org on the
Blacklisting tab of the Email Servers Settings in Network Services >
Email. That took care of those hoseheads trying to bypass the MX.
I checkmarked the "Enable delay_checks" option on the Advanced tab,
because of this description for that option:
"delay_checks changes the order Sendmail checks if a connection is correct
or not, this is a good option to us if you use RBL blacklists."
I thought that would enable customers sending email out via my SMTP that
connect with SMTP-AUTH to bypass the RBL check, but it did not. Even
thought the customer logged in with SMTP-AUTH, they were then blocked from
sending mail by the RBL.
I had to add their IP connection hostname to the relay list in order to
allow them to send mail. Not a big deal in this particular case because I
know where these customers are coming from, but still I thought if they
logged in via SMTP-AUTH they should be verified and not have to then go
through the RBL check as well.
Regards,
dAvid tHacker Email: <a class="moz-txt-link-abbreviated" href="mailto:David@ThackerNet.com">David@ThackerNet.com</a>
Thacker Network Technologies Inc. <a class="moz-txt-link-freetext" href="http://www.ThackerNet.com">http://www.ThackerNet.com</a>
_______________________________________________
Blueonyx mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Blueonyx@mail.blueonyx.it">Blueonyx@mail.blueonyx.it</a>
<a class="moz-txt-link-freetext" href="http://mail.blueonyx.it/mailman/listinfo/blueonyx">http://mail.blueonyx.it/mailman/listinfo/blueonyx</a>
</pre>
</blockquote>
<br>
I see when I look up the IP that I am connecting from at <a
href="http://www.whatismyip.com/">the http://www.whatismyip.com/</a>
site, that my IP is not listed as dynamic.<br>
So, I can't actually test it myself now. <br>
<br>
<br>
Also, what I used to do is enable poprelay, then in the sendmail.cf
I'd edit it to allow all IPs that were in the poprelayd database. <br>
The section I'd edit is below.<br>
<br>
<br>
######################################################################<br>
### check_relay -- check hostname/address on SMTP startup<br>
######################################################################<br>
<br>
<br>
SLocal_check_relay<br>
<br>
<br>
#begin ken changes<br>
# Put address in cannonical form<br>
R$* $: $>Parse0 03 $1<br>
R$* < $* > $* $: $1 < $2 . > $3<br>
R$* < $* . . > $* $1 < $2 . > $3<br>
# Test against pop-before-relay hash<br>
R$* $: < $&{client_addr} ><br>
R< $* > $(popauth $1 $)<br>
R$* < MATCH > $#OK<br>
#end ken changes<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Ken Marcus
<a class="moz-txt-link-abbreviated" href="http://www.precisionwebhosting.com">www.precisionwebhosting.com</a>
Precision Web Hosting, Inc. </pre>
</body>
</html>