[email] relay probe

Vernon Schryver vjs@calcite.rhyolite.com
Sat May 24 15:54:51 UTC 2003


Relay tests are necessarily all substantially identical and so "bulk."
When unsolicited, they are "spam."
Thus, no matter what their justification or rational, relay attempts
through my systems earn entries in my blacklists.


The following is from a DCC log file. 
See http://www.rhyolite.com/anti-spam/dcc/
and http://www.rhyolite.com/anti-spam/dcc/dcc-tree/dccm.html#FILE-logdir 

VERSION: 3
DATE: 05/24/03 06:16:19 MDT
IP: ik-dynamic-66-102-65-17.kingston.net ::ffff:66.102.65.17
HELO: pc.interlinx.bc.ca
env_From: <relay-test@interlinx.bc.ca>  mail_host=interlinx.bc.ca.
env_To: <relay-test@interlinx.bc.ca>  addr=relay-test@interlinx.bc.ca  dir=userdirs/esmtp/relay-test@interlinx.bc.ca

To: relay-test@interlinx.bc.ca
From: relay-test@interlinx.bc.ca
Subject: test for susceptibility to third-party mail relay
Date: Sat, 24 May 2003 12:16:19 GMT
Message-Id: <rlytest-1053778579-28493@pc.interlinx.bc.ca>

This is a test of third-party mail relay, generated by the
"rlytest" <URL:http://www.unicom.com/sw/#rlytest> utility.

    Target host = 192.188.61.3
    Test performed by <relay-test@interlinx.bc.ca>

A well-configured mail server should NOT relay third-party email.
Otherwise, the server is subject to attack and hijack by Internet
vandals and spammers.



### end of message body ########################
sendmail.cf-->{dcc_isspam}: "DISCARD: Relaying denied  Sent to DCC"

X-DCC-Rhyolite-Metrics: calcite.rhyolite.com 101; bulk Body=many Fuz1=many
	Fuz2=many
                                                      checksum              
                       IP: 27a5a958 fe068a54 35d6b3a5 7e9ffe75              
                 env_From: a914e4d0 ed0b8b23 f8c8feb9 a6991077              
                     From: a914e4d0 ed0b8b23 f8c8feb9 a6991077              
          substitute helo: 32222525 32ad591b b9a246c4 bb07c047              
               Message-ID: ac03f939 937fae2d 2caf3159 b4578017              
                     Body: 405613dc d094eed7 fcf75e8d 7e39dc0c              
                     Fuz1: 516b4045 158eb22a 85b6e21b bb80bdc1              
                     Fuz2: d6ca61d8 a5b898db 0cdc3dc0 a6ca8822              
     substitute mail_host: 00b3fb73 866a0764 dc597ce9 f2020192              

result: discard




More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.