Subject: Network security problem: 203.178.141.195 is an open email relay From: The Open Relay Behaviour-modification System To: postmaster@mine.kame.net, postmaster@mine.kame.net Date: Fri, 14 Jan 2000 11:14:28 +1300 Reply-To: ORBS listings Please read this entire message carefully before replying If you are not the technical contact for your organisation, please forward this to the person who is. Reference: http://www.orbs.org/messagelookup.cgi?address=203.178.141.195 203.178.141.195 has been detected as an insecure email relay and added to the ORBS database. Please check the ORBS website (http://www.orbs.org/) for links to other sites that may be able to help you close your relay. Most mail transport agents can be secured quickly by the operator, usually for no cost other than the time take to read the appropriate instructions for your software. To be removed from the ORBS database, you need to disable the external relay features of your mail server and then report the IP address 203.178.141.195 to our web site at http://www.orbs.org/closed2.cgi?address=203.178.141.195 We will immediately remove your site's entry, then re-test it for third-party relay capabilities. ORBS is an automated testing system, if your mailserver has multiple IP interfaces, it is likely that you will receive multiple copies of this message. You should only receive one notice per IP number, however ORBS notices are sent to both the literal IP address and the resolved DNS name, so 2 notices may be received in some cases. Thank you for your attention to this matter. Sincerely, listings@orbs.org The message your system relayed is attached below. If you believe your server has been secured, please check the X-Envelope lines to see which vulnerability has been missed and check them against the list of vulnerabilties at http://www.orbs.org/envelopes.html >From sender@orbs.org Fri Jan 14 11:14:21 2000 Received: from mine.kame.net. (kame195.kame.net [203.178.141.195]) by mail2.manawatu.net.nz (8.9.3/8.9.3) with ESMTP id LAA28734 for ; Fri, 14 Jan 2000 11:14:18 +1300 X-Remote-IP: 203.178.141.195 Received: from relaytest.orbs.org (OrbsRtst@relaytest.orbs.org [202.36.148.5]) by mine.kame.net. (8.9.3/3.7W) with SMTP id GAA33809 for ; Fri, 14 Jan 2000 06:53:55 +0900 (JST) Date: Fri, 14 Jan 2000 06:53:55 +0900 (JST) From: sender@orbs.org To: orbs-relaytest@manawatu.co.nz X-Token: gvxyhcjdbvqwmplc X-Envelope-Sender: X-Envelope-Recipient: Message-Id: <203.178.141.195@orbs.org> Subject: ORBS Relay Test - 203.178.141.195 This program (re)tests for open relays. Open relays are automatically added to the ORBS Open Relay Database (see http://www.orbs.org/ for details). Open relays are rechecked monthly or more frequently. Secured hosts are rechecked every 3-6 months There are up to 17 different tests applied per IP address. Do not use the above addresses to contact me - use admin@orbs.org. Help on securing relays can be found at http://maps.vix.com/tsi/ and at http://www.orbs.org/otheresources.cgi X-Token: gvxyhcjdbvqwmplc X-Envelope-Sender: X-Envelope-Recipient: