Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SPAM Relay ?!
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
taxer
n00b
n00b


Joined: 11 Nov 2002
Posts: 15
Location: Switzerland

PostPosted: Tue Dec 10, 2002 8:24 am    Post subject: SPAM Relay ?! Reply with quote

After a long time of hard work (gameing) on my home pc, which is newly installed with gentoo I switched to the first console...

Code:

/usr/sbin/sendmail: smtp server didn't accept RCPT To: command, replied "554 SPAM-Relay detected"


was displayed!!!

What that means exactly?? Have somebody send SPAM with my pc or have somebody tried and failed?

The taget pc is a normal desktop pc without any firewall, it is directly connected to the internet by DHCP.
I didn't install sendmail, but there is a symlink /usr/sbin/sendmail to /usr/sbin/ssmtp
I don't need a mailtool, because I use this machine as a desktop without any server things..

But what should I do now?? Can I unmerge the ssmtp? Or is that the wrong solution?

I read in the ssmtp manpage that it writes a dead.letter file in the directory of the user, which is useing ssmtp.
And there is a dead.letter file in my /root directory!! It contains several times the same line:

Code:

find:/var/spool/cron/lastrun/cron.hourly:No such file or directory


but a empty cron.hourly file exists.

I'm really afraid of what this machine do, without my control

thanks for help
Back to top
View user's profile Send private message
voidzero
Bodhisattva
Bodhisattva


Joined: 21 Jul 2002
Posts: 265
Location: Grnn

PostPosted: Tue Dec 10, 2002 10:43 am    Post subject: Reply with quote

it clearly says "didn't accept". The crontab issue may be ignored, it's just something that has to do with crontab. Yeah, you could resolve it if you want to.
_________________
Diplomacy is the art of letting the other party have things your way.
-- Daniele Vare
Back to top
View user's profile Send private message
darktux
Veteran
Veteran


Joined: 16 Nov 2002
Posts: 1086
Location: Coimbra, Portugal

PostPosted: Tue Dec 10, 2002 11:25 am    Post subject: Reply with quote

It clearly states that you are acting as an Open Relay.
Puting this in another words, SPAMMERS can use your PC to SPAM. Check your MTA's configuration.
_________________
Lego my ego, and I'll lego your knowledge

www.tuxslare.org - My reborn website :P
Back to top
View user's profile Send private message
voidzero
Bodhisattva
Bodhisattva


Joined: 21 Jul 2002
Posts: 265
Location: Grnn

PostPosted: Tue Dec 10, 2002 11:26 am    Post subject: Reply with quote

/usr/sbin/sendmail: smtp server didn't accept RCPT To: command, replied "554 SPAM-Relay detected"
_________________
Diplomacy is the art of letting the other party have things your way.
-- Daniele Vare
Back to top
View user's profile Send private message
darktux
Veteran
Veteran


Joined: 16 Nov 2002
Posts: 1086
Location: Coimbra, Portugal

PostPosted: Tue Dec 10, 2002 12:23 pm    Post subject: Reply with quote

My apologies, you are correct. No spam going on in there. sorry :cry:
_________________
Lego my ego, and I'll lego your knowledge

www.tuxslare.org - My reborn website :P
Back to top
View user's profile Send private message
klieber
Bodhisattva
Bodhisattva


Joined: 17 Apr 2002
Posts: 3657
Location: San Francisco, CA

PostPosted: Tue Dec 10, 2002 12:42 pm    Post subject: Re: SPAM Relay ?! Reply with quote

taxer wrote:
What that means exactly?? Have somebody send SPAM with my pc or have somebody tried and failed?

Someone has tried and failed.

taxer wrote:
The taget pc is a normal desktop pc without any firewall, it is directly connected to the internet by DHCP.

This is really a Bad Idea. SPAM is only one of the many Bad Things that can happen to you and your machine. There are also people out there that will root your machine just for fun, or to use it as a zombie in DDoS attacks, etc.

I'd suggest you at least slap some basic firewall rules on your box -- iptables is free and part of linux. There's a great iptables tutorial that will help you understand how it works and how to configure it to protect your machine. It's not something you can throw together in 10 minutes, but it is (IMO) worth the effort to learn and understand.

Another option would be to purchase a hardware firewall, like the Linksys BEFSR11. It runs about $50US most places and is very easy to set up and use. (it is something you can set up in under 10 minutes) Not quite as feature-rich or scalable as iptables, but much easier to get up and running.

Anyway, hope that helps.

--kurt
_________________
The problem with political jokes is that they get elected
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum