Blackhole-open relay

Hi,
You could try the following although these are the instructions for setting this up on domino 5.10

If you go into the server configurations settings for the server..
Then select Router/SMTP
Then select Restrictions and Controls
Finally Select SMTP Outbound controls.
In here you should see a allow messages only from the following internet addresses to be sent to the internet in here you should have it say *.company.email.address

This then should only allow valid internal address to send from your server. You should also check you firewall configuration to make sure that this is all in order as well.

Correction:I am using lotus domino server release 5.0.11

The only other answer I can think off is to look at your firewall security policy and the access control policy on your router whch goes to your ISP. What you could do is to ask your ISP which ip address they use to connect to your router for smtp traffic and then only allow smtp traffic to your mail servers from these address. This could be done by the acl on the router. Else you could try and block smtp traffic on your firewall from sources other than your ISP.

I believe that once you are Black hole listed, even though you have stopped relaying you must petition them to take you off the list.

ordb.org is an organization that tests for open relay servers and lists them to ISP's which then use the list as a filter to help prevent spam from coming to their client list. Go to their site, you will probably find the instructions you need to correct the problem with your software.

Also are you sure it is your mail server that is the problem? A lot of web servers have smtp capabilities that should be locked down, so this is another place to check.

I believe the answer above is also correct in saying that you must repetition to have your server removed from the list.

Good luck.

As far as I know, Lotus domino server is inadequate when it is open to the Internet for Internet mail routing, especially version R5.x and below. Domino was not build to handle relay or spaming. It does allowed filtering and denying through listing of inbound and outbound address. Then again you need to define this list yourself, is close to impossible, unless you make it your full time job. Even if you have all possible address listed, a cleverly crafted mail header can still get through lotusdefense mechanism.

If you have the alternative, upgrade to Domino R6, which caters for more robust UBE filtering/coding and have the DNSRBL features enabled. It also have a new addition, Inbound Relay Enforcement, which have the SMTP auth options(which only allow login user to relay). Though I still don't trust Lotus to be able handle relay security adequately. But it's better compared to R5.x and below.

Alternatively, you can set up SMTP gateway to handle relay before mail reach the Domino server. There are both commercial and open source software that can handle this well. If, on windows platform, I could only think of the commercial version of sendmail. For open source, sendmail, postfix and qmail.

If no addition or upgrade can be made to current system. As far as for closing open relay, R5 is not capable of handling it adequately. You can try third party anti-spam software .. but I advise against it as if you stop subscribing and stop upgrading, it can be easily by passed. Alternatively you can try to write a program that sits between the port 25 and lotus note socket to close the relay.

This question was closed by the author