[Openvas-devel] openvas relay check bogus?

[Hanno Böck]

Am Dienstag 11 August 2009 schrieb Michael Meyer:
> | mime at kira:~ %  telnet usrportage.de 25
> | Trying 78.46.69.2...
> | Connected to usrportage.de.
> | Escape character is '^]'.
> | 220 milch.schokokeks.org ESMTP
> | helo localhost
> | 250 milch.schokokeks.org Ok.
> | MAIL FROM: <mail at usrportage.de>
> | 250 Ok.
> | RCPT TO: <mime%gmx.de at usrportage.de>
> | 250 Ok.
> | DATA
> | 354 Ok.
> | FROM: <mail at usrportage.de>
> | To: <mime%gmx.de at usrportage.de>
> | Subject: test
> |
> | test
> | .
> | 250 Ok. 000000004A813915.000053F2
> | quit
> | 221 Bye.
> | Connection closed by foreign host
>
> `---|
>
> Somebody should have a look in the logs to see what happend with
> the Mail with ID "000000004A813915.000053F2". Because this Mail was
> accepted, this host was recognized as an open relay, even if the mail
> was discarded internal. The Script could not detect that. ;-)
> The mail never arrived here, so i think it was truly discarded
> internal.

In fact the mail was delivered, as the domain contains a catchall.
Is there any reason mime%gmx.de at usrportage.de should be delivered to gmx? I 
see this as a completely valid mail adress on usrportage.de.

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno at hboeck.de

http://schokokeks.org - professional webhosting
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
Url : http://lists.wald.intevation.org/pipermail/openvas-devel/attachments/20090812/548f1491/attachment.pgp