Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 5204 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Open Relay - UTM 320

CDK
Good day all,

I did not see any forum rules so I hope I don’t get ‘flamed’ for posting a question as an introduction.

Also been searching on this forum for possible solutions to my question to no avail;

Currently using Mail Proxy in Simple mode, have my relay set to Host-based relay for my internal mail server.

I have upstream hosts configured and only allow relay from these upstream hosts, who also spool my mail.

It seems as if my UTM 320 is acting as an open relay as I am able to telnet onto port 25, do a ehlo against the upstream host, mail from: <>, rcpt to: djwfhfjvbjfs@mydomain.co.za with OK.

I have gone over my UTM config over and over, what am I missing or not understanding.

Thanking you in advance for any info.

Cheers!

Chris.


This thread was automatically locked due to age.
Parents
  • 0
    If I do not put my WWW IP in that list, I cannot send mail out.

    That spot relates only to inbound mail, so only the first two should be there.

    I guess that you have an Exception for your domain or that you aren't using 'Recipient verification'.  In any case, the rejection of an email for a recipient outside your domain means that you're not operating an open SMTP relay.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    If I do not put my WWW IP in that list, I cannot send mail out.

    That spot relates only to inbound mail, so only the first two should be there.

    I guess that you have an Exception for your domain or that you aren't using 'Recipient verification'.  In any case, the rejection of an email for a recipient outside your domain means that you're not operating an open SMTP relay.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML