local relay spamming

Discussion regarding the Standard version.
Post Reply
foo
Posts: 2
Joined: Tue Mar 22, 2016 5:20 pm

local relay spamming

Post by foo »

Hi,

Could you please tell me how to disable local "relaying" without authentication. Here is my output I've changed the domains.

Connected to mail.hostingserver.tld.
Escape character is '^]'.
220 mail.hostingserver.tld ESMTP MailEnable Service, Version: 9.04-- ready at 03/22/16 19:12:01
ehlo deneme.aysima.net
250-mail.hostingserver.tld [12.12.12.12], this server offers 4 extensions
250-AUTH LOGIN
250-SIZE 16777216
250-HELP
250 AUTH=LOGIN
mail from:info@hostingdomain.tld
250 Requested mail action okay, completed
rcpt to:info@hostingdomain.tld
250 Requested mail action okay, completed
data
354 Start mail input; end with <CRLF>.<CRLF>
ok.
.
250 Requested mail action okay, completed
quit


from: user@domain.tld
to : *@anydomainontheserver.tld

dont need smtp authentication.

I removed 127.0.0.1 from "Allow relay for privileged IP ranges" also disabled it but both didnt solved. I dont have any problem with remote mailboxes.

I want to disable any mail to local server mailboxes without smtp authentication.

Thanks,

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: local relay spamming

Post by MailEnable-Ian »

Hi,

You need to enable the SMTP security option for "Address Spoofing" and set it to "Authenticated users can spoof the sender address".
Regards,

Ian Margarone
MailEnable Support

Nescom
Posts: 3
Joined: Mon Mar 21, 2016 5:06 pm

Re: local relay spamming

Post by Nescom »

Actually I've the same issue.

You are right with your solution as long as you have only one mail server for your domain.

We are running more than one and that means any mail send primary mail server is rejected in MailEnable
xx1@domain.de is configured on both server, xx2@domain.de is also configured on both server.
If xx2@domain.de send to xx1@domain.de its delivered on primary server, but not in MailEnable you see this:
03/23/16 08:20:05 SMTP-IN 757AD1666C384C7BA7CC1028140A5766.MAI 948 178.250.172.201 220 web13.nescom.de ESMTP MailEnable Service, Version: 9.00-- ready at 03/23/16 08:20:05 0 0
03/23/16 08:20:05 SMTP-IN 757AD1666C384C7BA7CC1028140A5766.MAI 948 178.250.172.201 EHLO EHLO hub.exchangebox.net 250-web13.nescom.de [178.250.172.201], this server offers 4 extensions 133 26
03/23/16 08:20:05 SMTP-IN 757AD1666C384C7BA7CC1028140A5766.MAI 948 178.250.172.201 MAIL MAIL FROM:<xx1@domain.de> SIZE=63401 551 This mail server requires authentication before sending mail from a locally hosted domain. Please reconfigure your mail client to authenticate before sending mail. 169 48
03/23/16 08:20:05 SMTP-IN 757AD1666C384C7BA7CC1028140A5766.MAI 948 178.250.172.201 QUIT QUIT 221 Service closing transmission channel 42 6
The other mail server "Address Spoofing" can be configured by IP-range.

In MailEnable i have tried to add the secondary mail server under SMTP/Relay/Privileged IP's but even this dose have no effect on 551 error.

How can I receive mails from external (primary) mail server for local configured domains but not disabling the Address Spoofing in general? Also the primary server cannot authenticate on MailEnable for this.

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: local relay spamming

Post by MailEnable-Ian »

Hi,

You need to add the incoming IP address to the SMTP relay option for "Allow privileged IP's can relay under the deny all - except those in the list" option. Then set the SMTP address spoofing option to "Authorized connections can spoof the sender address".
Regards,

Ian Margarone
MailEnable Support

Post Reply