Mailserver Being Used As A SPAM Relay - How Can We Track The User Causing This?
(Doc ID 1925423.1)
Last updated on APRIL 20, 2021
Applies to:Oracle Communications Messaging Server - Version 7.0.5 and later
Information in this document applies to any platform.
Oracle Communications Messaging Server 22.214.171.124.0 64bit
We have a problem where our mail server is being used as a SPAM relay. We had to block 2 different IPs because they were identified and produced lots of messages in our log files.
Snippets from mail.log_current:
We do not have an entity called "User" as a username to authenticate.
All traffic to and from the Messaging Server passes through our Firewall. Nothing was changed on either the Messaging Server or the Firewall when the problem started happening.
Normally, we allow unauthenticated connections from our own subnet; all other connections must be authenticated.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document