Relaying server

[baravalle]

Hi,
apparently Nessus says that my mailserver is a open relay server.

In PLESK I have chosen the option that should allow the use of SMTP only if you have an authorisation, but apparently is not enought.

Any suggestions?

Andres

 

[jamesyeeoc]

Be aware that some open relay tests may show false positives. Do not rely on a single test, use several testers.

As long as you have SMTP Auth and not POP lock, you should be fine. Of course, make sure your users don't use silly passwords...

 

[baravalle]

Thanks - I'll try to look for another test. Would you suggest any test?

Andres

 

[jamesyeeoc]

There are many out there, such as:

relay-test.mail-abuse.org
www.ordb.org/submit/
www.abuse.net/relay.html
njabl.org

hundreds or thousands of others on the internet....

Caution: Be aware that some of these test sites, if you test positive, will automatically add your server's IP to their list. I would only run the ones which do not auto-add you to a list just in case they show a true or false positive...

Also remember that some tests will show a false positive no matter what you do. The ones I list above are some of the more popular ones, not a recommendation really, but I have used them or had to deal with them in the past.