#1 (permalink)  
Old 04-08-2009, 09:28 AM
Registered User
 
Join Date: Jun 2005
Posts: 86
jez9999 is on a distinguished road
Why is my mail server an open relay?

http://verify.abuse.net/relay.html

This site tells me, when I enter my domain name, that my mail server appears to be an open relay. In addition, when I register for abuse.net and try and get it to send an e-mail to me, that e-mail successfully arrives. This would suggest that my host is acting as an open relay!

As cPanel is what writes exim.conf (I make changes, they're liable to be overwritten), I'm guessing it's cPanel's responsibility to tighten this up. Why on earth is my host acting as an open relay? How can I stop it with cPanel?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 04-08-2009, 01:20 PM
Registered User
 
Join Date: Aug 2008
Location: India
Posts: 35
servertechs is on a distinguished road
You need to check this with your hosting provider as cpanel server has open relay closed by default.
__________________
|24x7 365 Support |Server Management|
http://www.servertechs.net
sales@servertechs.net
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 04-08-2009, 01:22 PM
cPanelDavidG's Avatar
cPanel Technical Sales
 
Join Date: Nov 2006
Location: Houston, TX
Posts: 8,117
cPanelDavidG is on a distinguished road
Quote:
Originally Posted by jez9999 View Post
http://verify.abuse.net/relay.html

This site tells me, when I enter my domain name, that my mail server appears to be an open relay. In addition, when I register for abuse.net and try and get it to send an e-mail to me, that e-mail successfully arrives. This would suggest that my host is acting as an open relay!

As cPanel is what writes exim.conf (I make changes, they're liable to be overwritten), I'm guessing it's cPanel's responsibility to tighten this up. Why on earth is my host acting as an open relay? How can I stop it with cPanel?
cPanel/WHM does not natively support open relaying. However, if you are logged in successfully via POP3 or IMAP, the workstation you are connecting from is whitelisted for sending mail for 30 minutes, meaning SMTP authentication will not be required for sending email during that period of time. Many often mistake this for open relaying.

If this is not the scenario you are experiencing, I recommend you let our technical analysts take a look at your server as being an open relay can cause problems such as your server becoming blacklisted for sending spam.
__________________
Need technical assistance? You can find your best avenue for support at: http://support.cPanel.net
-- cPanel David G., Lead Forum Administrator & cPanel Technical Sales Representative
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 06-24-2009, 01:51 AM
Registered User
 
Join Date: Aug 2004
Posts: 190
djmerlyn is on a distinguished road
For the first time today, PCI failed me because port 25, port 465, and port 587 are open relays.

A month ago when I was scanned I didn't have any open relays.

If cpanel is not an open relay by default, then where should a cpanel user/operator check to make sure that indeed there is nothing wrong with the cpanel configuration and it is not an open relay?

Pretty tough to tell for sure when PCI fails you, but all available tests show it as being OK...surely McAfee can't be that faulty lol;
open relay test - Google Search
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 06-24-2009, 05:26 AM
Registered User
 
Join Date: Dec 2008
Posts: 45
britsenigma is on a distinguished road
don't get me started with mcafee...
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #6 (permalink)  
Old 06-25-2009, 03:13 PM
Registered User
 
Join Date: Aug 2004
Posts: 190
djmerlyn is on a distinguished road
Quote:
Originally Posted by britsenigma View Post
don't get me started with mcafee...
I know huh, still begs the question who is right though
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #7 (permalink)  
Old 06-26-2009, 03:09 AM
Senior Member
 
Join Date: Jun 2005
Location: Area 51
Posts: 1,618
Spiral is on a distinguished road
Quote:
Originally Posted by britsenigma View Post
don't get me started with mcafee...
Amen, brother!

To jez9999, there are about a million ways your server could be misconfigured or
possibly even compromised with abusive scripts that could lead to an open relay
type condition. Incidentally, your receiving mail from anyone is no test or
confirmation of any open relay. That question is only answered if non-authenticated
users from outside your server can send to destination also outside your server.

Last edited by Spiral; 06-26-2009 at 03:17 AM.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #8 (permalink)  
Old 07-03-2009, 01:03 PM
kran's Avatar
Registered User
 
Join Date: Jul 2003
Location: Colombia
Posts: 74
kran
Quote:
Originally Posted by Spiral View Post
Amen, brother!

To jez9999, there are about a million ways your server could be misconfigured or
possibly even compromised with abusive scripts that could lead to an open relay
type condition. Incidentally, your receiving mail from anyone is no test or
confirmation of any open relay. That question is only answered if non-authenticated
users from outside your server can send to destination also outside your server.
All my servers went open Relay after I upgaded to Last Stable release.
__________________
www.americandominios.com
hosting Colombia - LatinAmerica
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #9 (permalink)  
Old 07-03-2009, 02:39 PM
cPanelDavidG's Avatar
cPanel Technical Sales
 
Join Date: Nov 2006
Location: Houston, TX
Posts: 8,117
cPanelDavidG is on a distinguished road
Quote:
Originally Posted by kran View Post
All my servers went open Relay after I upgaded to Last Stable release.
By this statement, do you mean that your servers were reported as being an open relay or do you mean your servers actually are an open relay (anyone can send mail via your server without any authentication)?
__________________
Need technical assistance? You can find your best avenue for support at: http://support.cPanel.net
-- cPanel David G., Lead Forum Administrator & cPanel Technical Sales Representative
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #10 (permalink)  
Old 07-04-2009, 03:07 AM
kran's Avatar
Registered User
 
Join Date: Jul 2003
Location: Colombia
Posts: 74
kran
Sorry false alarm

It was just my firewall (I upgrade Cpanel and the firewall) and it was giving me RELAY alerts after a successful authentication.
__________________
www.americandominios.com
hosting Colombia - LatinAmerica
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 10:51 PM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
© cPanel Inc