Setting up SMTP-AUTH

Discussion in 'Installation/Configuration' started by tristanlee85, Apr 19, 2007.

  1. tristanlee85

    tristanlee85 New Member

    Since I can't figure out how to successfully stop relaying on my server, I've been informed that using SMTP-AUTH is the way to go so only I can relay through my server. I have ISPConfig already installed and I was reading the Postfix How-To here ( http://www.howtoforge.com/howto_postfix_smtp_auth_tls_howto ) but that's when you are starting from scratch to setup SMTP-AUTH. How would i go about setting this up on a ISPConfig system?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    That is not the best howto for your ISPConfig server. Please configure your server as described in the perfect setup howto for your linux distribution.
     
  3. tristanlee85

    tristanlee85 New Member

    I did. I followed the Fedora Core 5 64-bit (even though I'm 32-bit) without issues. It says to see if everything is good, telnet to the SMTP server.

    Code:
    [tristan@localhost ~]$ telnet 192.168.1.130 25
    Trying 192.168.1.130...
    Connected to 192.168.1.130 (192.168.1.130).
    Escape character is '^]'.
    220 server.vasceria.com ESMTP Postfix
    ehlo testing
    250-server.vasceria.com
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-STARTTLS
    250-AUTH LOGIN PLAIN
    250-AUTH=LOGIN PLAIN
    250 8BITMIME
    
    I am assuming that I should have to enter in a username/password to send mail out correct? I'm resorting to this because I can't seem to find any other way to block people from using me as a relay.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

  5. tristanlee85

    tristanlee85 New Member

    I think Falko gave me the link to that in the past and the results show that I'm good.

    Code:
    Connecting to www.plastikracing.net for anonymous test ...
    
    <<< 220 server.vasceria.com ESMTP Postfix
    >>> HELO www.abuse.net
    <<< 250 server.vasceria.com
    Relay test 1
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 2
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<spamtest>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 3
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 4
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 5
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<spamtest@[24.95.42.77]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 6
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<securitytest%[email protected]>
    <<< 554 <securitytest%[email protected]>: Relay access denied
    Relay test 7
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<securitytest%abuse.net@[24.95.42.77]>
    <<< 554 <securitytest%abuse.net@[24.95.42.77]>: Relay access denied
    Relay test 8
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<"[email protected]">
    <<< 554 <[email protected]>: Relay access denied
    Relay test 9
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<"securitytest%abuse.net">
    <<< 554 <securitytest%abuse.net>: Relay access denied
    Relay test 10
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]@plastikracing.net>
    <<< 554 <[email protected]@plastikracing.net>: Relay access denied
    Relay test 11
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<"[email protected]"@plastikracing.net>
    <<< 554 <[email protected]@plastikracing.net>: Relay access denied
    Relay test 12
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]@[24.95.42.77]>
    <<< 554 <[email protected]@[24.95.42.77]>: Relay access denied
    Relay test 13
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<@plastikracing.net:[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 14
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<@[24.95.42.77]:[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 15
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<abuse.net!securitytest>
    <<< 554 <abuse.net!securitytest>: Relay access denied
    Relay test 16
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<[email protected]>
    <<< 554 <[email protected]>: Relay access denied
    Relay test 17
    >>> RSET
    <<< 250 Ok
    >>> MAIL FROM:<[email protected]>
    <<< 250 Ok
    >>> RCPT TO:<abuse.net!securitytest@[24.95.42.77]>
    <<< 554 <abuse.net!securitytest@[24.95.42.77]>: Relay access denied
    Relay test result
    All tests performed, no relays accepted.
    Yet people are still using me to spam fake eBay e-mails. Road Runner only allows sending up to 1000 e-mails a day and if I get spammed, my limit is reached instantly and I can't send mail for another 24 hours.
     
  6. falko

    falko Super Moderator Howtoforge Staff

    Well, this might mean that you have a vulnerable contact form/guestbook/whatever in one or more of your web sites that can be abused by spammers... :(
     
  7. tristanlee85

    tristanlee85 New Member

  8. falko

    falko Super Moderator Howtoforge Staff

    Well, it's possible for spam bots nowadays to crack the captchas... :(
     
  9. tristanlee85

    tristanlee85 New Member

    Could be, but they can't specify where to send the e-mail in that form. Anything entered in that form goes to [email protected].
     
  10. falko

    falko Super Moderator Howtoforge Staff

    There's a problem with PHP's mail() function: it doesn't check if there are linebreaks in the parameters that you pass to it. Maybe that makes you contact form vulnerable.
     

Share This Page