Possible relay problem in domino 6.05?

HCL Domino Domino Forum
1

We’ve just been blacklisted as an open relay because of our domino routing server. After a bit of investigation in the logs (see test from RSS below), it does seem to be the case as there was 2 messages being sent out from one received.

Having examined the inbound relay settings there is an ‘*’ in the ‘Deny messages sent to the following external internet domains’ which should by all accounts stop any relaying.

We do seem to have solved the problem by enabling using ‘Verify local domain recipients exist in Domino Directory’ but I was wondering if anyone else has encountered a similar problem with relaying?

30/01/2006 16:15:16 Router: Unable to deliver message 00594941 to “rss-result2%zncfpngpure.com”@ourdomain.com from unavailable@[80.193.215.198] OF8C7547E1:C362AC38 ON80257106:00594941

30/01/2006 16:15:16 User “rss-result2%zncfpngpure.com”@ourdomain.com not listed in Domino Directory

30/01/2006 16:15:16 Router: [00000006] Transferring mail to domain 172.16.16.10 (host 172.16.16.10 [172.16.16.10]) via SMTP

30/01/2006 16:15:16 Router: Transferred 2 messages to 172.16.16.10 (host 172.16.16.10) via SMTP

30/01/2006 16:15:21 Router: Message 0059493E transferred to 172.16.16.10 for rss-result2@zncfpngpure.com from unavailable@[80.193.215.198] Size: 5K via SMTP

30/01/2006 16:15:21 Router: Message 005949D5 transferred to 172.16.16.10 for unavailable@[80.193.215.198] from unavailable@[80.193.215.198] Size: 6K via SMTP

2

Subject: Possible relay problem in domino 6.05?

If I read that correctly, the original message was submitted by <unavailable@[80.193.215.198]>

There can be no legitimate reason to use an IP literal in SMTP MAIL FROM *.

If you set the server config field “Verify sender’s domain in DNS:” to enabled then attempts to submit mail from a literal will be rejected at source.

Also, the recipient address <“rss-result2%zncfpngpure.com”@ourdomain.com> should look like an attempted relay as Domino SMTP should parse it as rss-result2@zncfpngpure.com. If the message really was accepted for delivery and you have relaying disabled, then this looks like a regression to me.

  • It is legitimate to use a literal in RCPT TO, though most sites will reject this as non local.