Community Discussions and Support
Weird Messages on mail servers

You are running an open relay.  Use Configuration | MercuryS and turn off relaying and turn on strict.  Use the ESMTP Authorization to allow authorized user to relay.

You are running an open relay.  Use Configuration | MercuryS and turn off relaying and turn on strict.  Use the ESMTP Authorization to allow authorized user to relay.

Hello all, I've had a mail server up for a week now and as far as I'm aware there should be limited traffic coming to it as the domain name is a dumb on I use for development.

In the smtp connection history I am getting lots of connections some as follows:

 T 20090728 031553 4a676107 Connection from 118.160.240.3
T 20090728 031553 4a676107 helo www.MyMainServer.com
T 20090728 031553 4a676107 mail from:<michael78694@MyMainServer.com>
T 20090728 031554 4a676107 rcpt to:<candy59839@yahoo.com.tw>
T 20090728 031554 4a676107 data
T 20090728 031555 4a676107 DATA - 14 lines, 436 bytes.
T 20090728 031555 4a676107
T 20090728 031555 4a676107 Connection closed with 118.160.240.3, 2 sec. elapsed.

 Are these normal?

It also puts these lines in my MercuryE log:

 T 20090728 124906 4a675312 Begin processing job MO00001B from <>
W 20090728 124906 4a675312 Temporary error 249 (temporary MX resolution error) resolving 'MyMainServer.com'.
T 20090728 124906 4a675312 Job MO00001B processing complete.

 SO I'm assuming its trying to send something on, how can I stop this?  Is this somebody trying to us my mail server as a spam node?

Thanks for any help.

&lt;P&gt;Hello all, I&#039;ve had a mail server up for a week now and as far as I&#039;m aware there should be limited traffic coming to it as the domain name is a dumb on I use for development.&lt;/P&gt; &lt;P&gt;In the smtp connection history I am getting lots of connections some as follows:&lt;/P&gt; &lt;P&gt;&amp;nbsp;T 20090728 031553 4a676107 Connection from 118.160.240.3 T 20090728 031553 4a676107 helo &lt;A href=&quot;http://www.mymainserver.com/&quot; mce_href=&quot;http://www.mymainserver.com/&quot;&gt;www.MyMainServer.com&lt;/A&gt; T 20090728 031553 4a676107 mail from:&amp;lt;&lt;A href=&quot;mailto:michael78694@MyMainServer.com&quot; mce_href=&quot;mailto:michael78694@MyMainServer.com&quot;&gt;michael78694@MyMainServer.com&lt;/A&gt;&amp;gt; T 20090728 031554 4a676107 rcpt to:&amp;lt;&lt;A href=&quot;mailto:candy59839@yahoo.com.tw&quot; mce_href=&quot;mailto:candy59839@yahoo.com.tw&quot;&gt;candy59839@yahoo.com.tw&lt;/A&gt;&amp;gt; T 20090728 031554 4a676107 data T 20090728 031555 4a676107 DATA - 14 lines, 436 bytes. T 20090728 031555 4a676107 T 20090728 031555 4a676107 Connection closed with 118.160.240.3, 2 sec. elapsed.&lt;/P&gt; &lt;P&gt;&amp;nbsp;Are these normal?&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;It also puts these lines in my MercuryE log:&lt;/P&gt; &lt;P&gt;&amp;nbsp;T 20090728 124906 4a675312 Begin processing job MO00001B from &amp;lt;&amp;gt; W 20090728 124906 4a675312 Temporary error 249 (temporary MX resolution error) resolving &#039;MyMainServer.com&#039;. T 20090728 124906 4a675312 Job MO00001B processing complete.&lt;/P&gt; &lt;P&gt;&amp;nbsp;SO I&#039;m assuming its trying to send something on, how can I stop this?&amp;nbsp; Is this somebody trying to us my mail server as a spam node?&lt;/P&gt; &lt;P mce_keep=&quot;true&quot;&gt;Thanks for any help.&lt;/P&gt;

To make sure you have the relay settings the way you want them have a look at the Connection control tab in MercuryS configuration. To stop external relaying click the "Only authenticated SMTP connections may relay mail" checkbox, then allow relaying from your local network by IP range.

The message in the MercuryE log is an attempted error notification from Postmaster, but as the sender address domain presumably was fake nothing was sent.

/Rolf 

&lt;p&gt;To make sure you have the relay settings the way you want them have a look at the Connection control tab in MercuryS configuration. To stop external relaying click the &quot;Only authenticated SMTP connections may relay mail&quot; checkbox, then allow relaying from your local network by IP range.&lt;/p&gt;&lt;p&gt;The message in the MercuryE log is an attempted error notification from Postmaster, but as the sender address domain presumably was fake nothing was sent.&lt;/p&gt;&lt;p&gt;/Rolf&amp;nbsp;&lt;/p&gt;
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Pending draft ... Click to resume editing
Discard draft