CRITICAL BUG: Open Relay Detection

Feb 26 04 5:55 am

Wingate 5.2.2 fails the Open Relay Test at ordb.org and any Wingate site that ever gets TESTED by ORDB will be forever and permanetly black holed!

ORDB does not publish transcripts of it's test, but two independent sites I have tried report that the email handler fails the "RSET" command.

While this does not in any way allow the relaying of mail, the program FAILED their test and therefore is classified as a FAILED SITE.

Does ANYONE know how to fix this ???

Feb 26 04 9:19 am

Hmmm, how do you have WinGate mail set up? You havent accidentally unticked the 'allow relay' option have you? Have run the ORDB check against us here and we were fine, so it must be something particular to your set up. Coul dyou please provide some more information?

Regards

Neil

Feb 26 04 10:14 am

To Whoever is Interested:

I ran a 7+ hour test from Security Metrics Site: http://www.securitymetrics.com/index.adp, a few days ago and obtained an almost 100% Security Pass with 0 Risks showing. The only problem was that my Public IP Address that I connect to the Internet with, was counted as a possible detail that hackers could take advantage of.

Wingate (5.2.2) seems to close-up the "hacker-holes" as long as it is configured correctly.

Nothing more.

Regards, Warren