Testing for Open Relays?

From: Dan Kolb <dankolb_at_ox.compsoc.net>
Date: Sat May 18 10:12:41 2002

On Saturday 18 May 2002 06:23 am, Zane H. Healy wrote:
> Anyone have any favorite sites or tools to test an SMTP server for open
> relays? I finally got around to updating the SMTP configuration on my
> VMS server to reflect the upgrade from TCPIP 5.0 to 5.1 and would like
> to test it.

I think that some of the RBL sites will test a server for open relaying if
requested. This, of course, has the problem that you'd be blacklisted if
you have an open relay :-)

Pretty much all mail servers will allow relaying from the local machine to
any mail address. Some will allow anyone on the local network to relay
through the machine, so using another machine on your network isn't
necessarily a good test either.

Best thing to do would be to get shell access to a machine somewhere on
the Internet, and do the following:

telnet $VMS-MAIL-SERVER 25
helo foo # This seems to be pretty much ignored by mail servers
              # nowadays, but is often required
mail from: foo_at_bar.com #where this is your email address
rcpt to: baz_at_bat.net #where bat.net is not the domain that you've got set
                             #up on the VMS machine
data
#Type some data here
.
quit

You should at some point get an error message saying that relaying is
denied (either after you type 'quit', or after 'rcpt to', depending on
the mail server). Also, in case you do have relaying enabled, make sure
that baz_at_bat.net is either your own email address, or someone who knows
you're trying out mail relaying - random people who don't know you won't
be too happy getting test mails :-) (if you're in need of a junk to:
address, send it to mailtests_at_eco.li; it's on one of my domains, so I can
let you know if any messages get to it).

Alternatively, if you give me the IP address of your VMS machine, I can do
a quick test within a few minutes of getting your email.

Dan
-- 
The past always looks better than it was.  It's only pleasant because
it isn't here.
		-- Finley Peter Dunne (Mr. Dooley)
Received on Sat May 18 2002 - 10:12:41 BST

This archive was generated by hypermail 2.3.0 : Fri Oct 10 2014 - 23:35:17 BST