Re: IP: 81.94.237.195

Hi Sarmite,

30.10.2007 11:39, Sarmite Danilova пишет:

> IP: 81.94.237.195
> Input IP: 81.94.237.195
> Transport: smtp <http://dsbl.org/relay-methods> 
> Message Received: 2007/10/18 03:32:51 UTC
> Message Sent By: trapper
> Extended Information for Transport:
> MAIL FROM:<[email protected]>
> RCPT TO:<[email protected]>

Yes, we know that on October 18 this server operated as a trivial open
relay. It looks like that you have fixed this security hole already.

And you still need to prove that someone at your side is able to receive
administrative mail in accordance with the public name of the host in
question. This name is "rev-81-94-237-195.deac.net" now, but I strongly
recommend you to change it to something more relevant.

Alexey


> 
> 
> Full Message:
> 
> Received: from nwsbank.nl ([62.166.160.141]) by
> lvlexchange01.leasing.uni with Microsoft SMTPSVC(6.0.3790.3959); Thu, 18
> Oct 2007 06:31:08 +0300
> Message-ID: <8aRTcqBdpxNGP1yawWZbSquz3Rfx3xDn@trapper>
> Date: Thu, 18 Oct 2007 03:32:49 +0000
> To: <[email protected]>
> Subject: Open Relay Test Message
> From: [email protected]
> Return-Path: [email protected]
> X-OriginalArrivalTime: 18 Oct 2007 03:31:08.0671 (UTC)
> FILETIME=[529948F0:01C81137]
> 
> 
> This message is a test of your mail server to determine if
> it will perform relaying (re-sending) of e-mail messages
> for unauthorized outside parties.  This capability, if
> enabled in your mail server, is widely considered to be
> serious flaw in mail server security.
> 
> Your mail server is being tested for relaying capability
> because we have received mail from it and wish to determine
> its likelihood to be abused by spammers.
> 
> Kind regards,
> Sarmite Danilova
> Systems Administrator
> ___________________________________
> UniCredit Leasing
> Member of UniCredit Group
> 
> IT 
> SIA "UniCredit Leasing" 
> Mukusalas 41b,
> LV-1004, Riga
> Latvia
> Phone  +371 67442981 
> e-mail:[email protected]
> http://www.unicreditleasing.lv
> 
> 
> 
> 
>