[AMaViS-user] under which circumstances RelayedOpenRelay?

[John Adams]

Hi

I've just switched from amavisd-new 2.5.4 to 2.7.0-pre14 and I've
noticed {RelayedOpenRelay}.

Feb 10 21:27:10 mail.notice host amavis[29895]: (29895-01) Passed CLEAN
{RelayedOpenRelay}, [62.236.108.70]:57631 [83.103.80.66]
<dovecot-bounces+mailinglists=belf...@dovecot.org> ->
<mailin...@belfin.ch>, Message-ID: <20110210212...@xx.xx>,
mail_id: gbm51t1dgDsf, Hits: -, size: 3947, queued_as: BA49818E002, 187 ms

My gateways are no open relays. What are circumstances that amavisd-new
will log RelayedOpenRelay?

Thanks,
John

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
AMaViS-user mailing list
AMaVi...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
Please visit http://www.ijs.si/software/amavisd/ regularly
For administrativa requests please send email to rainer at openantivirus dot org

[Mark Martinec]

John,

> I've just switched from amavisd-new 2.5.4 to 2.7.0-pre14 and I've
> noticed {RelayedOpenRelay}.
>
> Feb 10 21:27:10 mail.notice host amavis[29895]: (29895-01) Passed CLEAN
> {RelayedOpenRelay}, [62.236.108.70]:57631 [83.103.80.66]
> <dovecot-bounces+mailinglists=belf...@dovecot.org> ->
> <mailin...@belfin.ch>, Message-ID: <20110210212...@xx.xx>,
> mail_id: gbm51t1dgDsf, Hits: -, size: 3947, queued_as: BA49818E002, 187 ms
>
> My gateways are no open relays. What are circumstances that amavisd-new
> will log RelayedOpenRelay?

The message is not 'originating' (e.g. source IP address matching
@mynetworks or $originating flag set by a policy bank), *and* the
recipient is not considered local. Therefore amavisd considers
it incoming, but addressed to an outside domain (which shouldn't
happen).

If this is an incoming message, the most likely reason is that
belfin.ch is not listed in the @local_domains_maps.

Mark

[Mark Martinec]

> If this is an incoming message, the most likely reason is that
> belfin.ch is not listed in the @local_domains_maps.

P.S. something like:

@local_domains_maps = ([qw( .localhost .example.com .example.org )]);

or read from a file:

@local_domains_maps = ( read_hash("$MYHOME/etc/local_domains") );

with one domain perl line. Leading dot implies subdomains in
addition to the named domain.