Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Relays and the GWIA

Status
Not open for further replies.

cderow

Technical User
Jul 13, 2001
216
US
While doing some observing of emails coming in and going out through the GWIA, I noticed a peculiar message come through the GWIA.

DMN: Will not relay: relaytest%rr.njabl.org (209.208.0.15)

I checked the IP address and it is an open relay testing site. My question is, is this site doing random scanning or is this something I need to worry about?
 
Hi.
Seems like it's just scanning & looking for an open relay to put in its database. These databases are sold to spammers.

The good news is that your GW system isn't relaying.

------------
Bill
Consultant / Network Engineer
CNE, CCNA
 

I've never heard of NJABL.org selling its list of open relays to spammers. NJABL.org is a spam fighting site, or was, and they do/did run a lot of open relay tests.

In any case, unless you get a lot of attempts to use your site as an open relay, you shouldn't worry since it shows it won't relay for them. If you do get a lot of attempts from the same address it could result in loss of bandwidth or denial of service, in which case I would contact the sending IP's ISP and file a complaint with their abuse@ department.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top