On 11 Jul 00, at 15:47, Damon Green <[log in to unmask]> wrote:

> Seems I am being used as a relay for a spammer from Japan.
> My LSMTP box only allows connections from the listserv machine,
> unfortunately thats the machine he's using as a relay.

Apart from what's already been suggested, it's also possible that the
reason it *looks* like the LISTSERV machine is relaying 3rd party
mail is that the spammer is sending the mail to listname-request
addresses. In this case, LISTSERV is correctly accepting mail (since
it's part of its job to forward listname-request mail to the list
owners) and correctly forwarding it to the owner addresses. If the
only people complaining about the spam being relayed through your
servers are list owners on your server, then you should suspect that
the listname-request address is what's being spammed, and not that
you've got an open relay on your hands.

A good way to find out if you have an open relay on your hands is to
telnet from the system in question to mail-abuse.org. This telnet
server goes through a bunch of open-relay tests and reports on the
various ways in which your server is open or reports "Sytem appeared
to reject relay attempts" if your server is properly secured.

Francoise