ConfigServer Community Forum

Hello,
Seems the csf is adding/blocking only port 25 and we have port 26 too which is causing the abuser to continiue sending:


Time: Fri Nov 21 18:34:32 2008 -0500
Type: AUTHRELAY, Remote IP - 66.201.176.126 (US/United States/-)
Count: 101 emails relayed
Blocked: Yes

Sample of the first 10 emails:

2008-11-21 18:28:22 1L3fQ3-0002O5-GH <= user@domain.com H=(66.201.177.132) [66.201.176.126] P=esmtpa A=fixed_login:user@domain.com S=118272 T="spam messages ..."


...


please add port 26 to be blocked as well on such an abuse.



Thanks.

I'll look into adding the additional ports for SMTP_BLOCK.

Thanks will be very good as long as cPanel is using 26 for a long time



Thanks,

chirpy wrote:I'll look into adding the additional ports for SMTP_BLOCK.

Please consider a full list of common SMTP ports, such as the following:

25, 26, 465, 587

25, default
26, common alternative
465, TLS
587, newer common alternative and meant for authenticated SMTP use

Thank you.

This has now been added via a new setting SMTP_PORTS in v4.25 where any number of SMTP ports can be listed.

chirpy wrote:This has now been added via a new setting SMTP_PORTS in v4.25 where any number of SMTP ports can be listed.

yes but you have bug up SMTP_ALLOWLOCAL = 1
see my post "big bug with with SMTP_ALLOWLOCAL = 1 not working right " in bugs

when do you thing this will be fixed