+ Responder ao Tópico



  1. #1
    Estanis
    Visitante

    Padrão Dúvidas no SENDMAIL

    Pessoal. Sou novato no Sendmail to com as seguintes dúvidas.


    Utilizo o Slackware com Sendmail

    tenho recebido muitos emails no root "/var/mail/root" do seguinte tipo:

    ***********************************************************************
    The original message was received at Thu, 14 Sep 2006 17:07:30 -0300
    from localhost
    with id k8EK7UmR018651

    ----- The following addresses had permanent fatal errors -----
    <[email protected]>
    (reason: 550 5.7.1 Unable to relay for [email protected])

    ----- Transcript of session follows -----
    ... while talking to mail.capsized.info.:
    >>> DATA
    <<< 550 5.7.1 Unable to relay for [email protected]
    550 5.1.1 <[email protected]>... User unknown
    <<< 554 5.5.2 No valid recipients
    *********************************************************************

    Recebo um email desses a cada 40 segundos pelo menos. Tive que redirecionar pra uma conta e baixar os emails na minha maq pessoal pra nao estourar as o tamanho da partição.

    Pra vocês terem ideia, de ontem a noite pra hoje, tem mais de 3000 :| e-mails desse tipo.

    Por sugestão de um amigo, dei uma olhada no ORDB.org pra testar se estava com relay aberto. Parece que não, pois me responderam o e-mail abaixo

    *************************************************************************
    This is an automatically generated email

    The host you submitted at ORDB.org (meu IP), has been thoroughly
    checked, and does not seem to permit relaying.

    Please note however, that this may be caused by extreme delays at
    the servers end.

    Should we at a later time receive one of our testing emails from the
    server you submitted, you will receive another email, telling you that
    the server is in fact an open relay. In that case, please disregard this
    email.

    If you know for a fact that the host you submitted is
    an open relay, please resubmit it via http://www.ORDB.org/submit/.
    Additionally, some administrators have been known to block our ip-address
    in various firewalling devices, which may also cause our test to fail.

    If your host was marked as an open relay, it has now been removed from our
    database, and will be removed from the relays.ORDB.org-zone during the next
    zone-rebuild.

    This email is sent from an unattended mailbox, so please do not
    reply to it. To find information about how to contact ORDB.org,
    please visit http://ORDB.org/contact/.

    Have a nice day, thank you for using ORDB.org

    PS. Need this mail translated? Have a look at:
    http://ORDB.org/translation/#not_a_relay
    **********************************************************************

    Os emails continuam a chegar sem parar. verifiquei meu arquivo /etc/mail/realy-domains e está assim:

    ***************************************************************************
    root@MEUSERVIDOR:/var/spool/mail# cat /etc/mail/relay-domains
    #ns2 RELAY
    #192.168.7.0 RELAY
    MEUDOMINIO RELAY
    uol.com.br RELAY
    starling.com.br RELAY
    gmail.com RELAY
    yahoo.com.br RELAY
    yahoo.com RELAY
    terra.com.br RELAY
    hotmail.com RELAY
    bol.com.br RELAY
    uai.com.br RELAY
    globo.com RELAY
    ibest.com.br RELAY
    pucminas.br RELAY
    stb.com.br RELAY
    *.org RELAY
    *.com.br RELAY
    *.com RELAY
    dba.com.br RELAY
    xmlgraphics.apache.org RELAY
    registro.br RELAY
    hbs.edu RELAY
    *************************************************************************

    Minha dúvida é se as linhas que comçam com * permitem que todos que estejam nesses dominios utilizem meu servidor pra enviar e-mail.

    Agradeço atenção de quem puder me ajudar a resolver isso. Tive que limpar na mao a fila do /var/spool/mqueue pq tava crescendo demais e simplesmente travando o SMTP.

    Mas o problema continua. Isso foi só um paleativo que arrumei.

    &#91;]'

    Estanis
    Analista de Suporte.

  2. #2

    Padrão Re: Dúvidas no SENDMAIL

    é provável que o que vc esteja vendo sejam os retornos dos zémail que um spammer tá mandando por seu intermédio (não vou jurar, contudo).

    vários testes - bons - aqui:

    http://spamlinks.net/prevent-secure-relay-test.htm

    faça o teste, antes de cair nas listas-negras.