<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=UTF-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.23569">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial>Thanks for the recommendations Michael.</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>I have shorewall firewall block port 25 for two days and
Jnos was good and no crash. Today, I tried open port 25 and monitored
TUN0 with tcpdump. The smtp mail spam just keep flowing and my
Jnos is accepting those spam mail for relay and crashing.</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>As I understood, by default Jnos Deny Relay. I tried
the commands "smtp deny relay" and "stmp relay deny" but not
accepted.</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>Still trying to find out why Jnos is accepting those
e-mail instead of denying relay. Before, I don't have in Rewrite a
specific define and all the spam e-mails accumulated in mqueue. Now, in
Rewrite everything that is not defined is put in check. So, the check.txt
file is growing larger (later delete) but at least is not smtp for delivered
out.</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial>José / HP2AT</FONT></DIV>
<DIV><FONT face=Arial> </FONT></DIV>
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><B>From:</B>
<A title=n6mef@mefox.org href="mailto:n6mef@mefox.org">Michael E Fox -
N6MEF</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=hp2cwb@cwpanama.net
href="mailto:hp2cwb@cwpanama.net">Jose Ng Lee</A> ; <A title=nos-bbs@tapr.org
href="mailto:nos-bbs@tapr.org">'TAPR xNOS Mailing List'</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, March 17, 2014 2:51
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [nos-bbs] How to avoid SMTP
spam mail in mqueue</DIV>
<DIV><BR></DIV>
<DIV>For the greatest protection, run all email through your separate mail
server. This includes:</DIV>
<DIV>-- inbound connections from Internet hosts to your public I
address,</DIV>
<DIV>-- inbound connections from Internet hosts to your 44.x address via
tunnel from the AMPRnet gateway, and</DIV>
<DIV>-- inbound connections from other 44.x machines to your 44.x address via
tunnels</DIV>
<DIV><BR></DIV>
<DIV>M</DIV>
<DIV><FONT size=2 face=Arial></FONT><BR></DIV>
<DIV><BR></DIV>
<DIV><BR></DIV>
<DIV>
<DIV style="COLOR: #575757; FONT-SIZE: 9px">Sent from my Verizon Wireless 4G
LTE smartphone</DIV></DIV><BR><BR>-------- Original message --------<BR>From:
Jose Ng Lee <HP2CWB@CWPANAMA.NET><BR>Date:03/17/2014 8:39 AM (GMT-08:00)
<BR>To: Michael E Fox - N6MEF <N6MEF@MEFOX.ORG>,'TAPR xNOS Mailing List'
<NOS-BBS@TAPR.ORG><BR>Subject: Re: [nos-bbs] How to avoid SMTP spam mail in
mqueue <BR><BR>
<DIV><FONT size=2 face=Arial>Thanks Michael for the tips on how to protect my
Jnos.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I could block SMTP (port 25) on the Firewall for
inbound mails to TUN0, but does that block also the good mail 44
route coming fron encap?</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I trying to figure out why my Jnos accepted all
those incoming spam mail. It should have issue an SMTP DENY and not
accepted those emails. Maybe, there is a script somewhere on my CentOS
machine allowing the entrace. So will keep looking.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>José / HP2AT</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><B>From:</B>
<A title=n6mef@mefox.org href="mailto:n6mef@mefox.org">Michael E Fox -
N6MEF</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=hp2cwb@cwpanama.net
href="mailto:hp2cwb@cwpanama.net">'Jose Ng Lee'</A> ; <A
title=nos-bbs@tapr.org href="mailto:nos-bbs@tapr.org">'TAPR xNOS Mailing
List'</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, March 17, 2014 8:28
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [nos-bbs] How to avoid
SMTP spam mail in mqueue</DIV>
<DIV><BR></DIV>
<DIV class=WordSection1>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Block
direct inbound SMTP connections to JNOS. <O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Set
up an MX in Linux using all the modern spam avoidance mechanisms dynamic
black lists, UBE detection, signature-based detection, etc.) and send all
inbound email to JNOS through that mail server using an MX record in
DNS. <O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Michael<O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">N6MEF<O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><O:P></O:P></SPAN></P>
<P class=MsoNormal><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><O:P></O:P></SPAN></P>
<DIV>
<DIV
style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #e1e1e1 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><B><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: windowtext; FONT-SIZE: 11pt">From:</SPAN></B><SPAN
style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: windowtext; FONT-SIZE: 11pt">
<A href="mailto:nos-bbs-bounces@tapr.org">nos-bbs-bounces@tapr.org</A>
[mailto:nos-bbs-bounces@tapr.org] <B>On Behalf Of </B>Jose Ng
Lee<BR><B>Sent:</B> Sunday, March 16, 2014 10:55 PM<BR><B>To:</B> TAPR xNOS
Mailing List<BR><B>Subject:</B> [nos-bbs] How to avoid SMTP spam mail in
mqueue<O:P></O:P></SPAN></P></DIV></DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">I noticed today my Raspberry Pi
Jnos was respawing in every few minutes. So, I checked and found
out there was some spam e-mails in mqueue not been able to deliver and
causing the system to crash and respawn. Deleted those e-mails and
checking the logs and put in blacklist the offender
IPs.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">I play with 3 Jnos
systems:</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Main systems PC with Linux Ubuntu
12.04 LTS: onx.hp2at.ampr.org</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">No spam mail in
mqueue.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Raspberry Pi with Raspbian:
hp2ng.ampr.org</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Few spam mail in
mqueue.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">PC with Centos 5.9:
hp2sa.ampr.org</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">THOUSANDS of spam mail in
mqueue. Don't know how this got through or why it was received in
JNOS. The autoexec.nos is the same as my other
system.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">This is on the message heading on
one mail:</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Received: from pc-200402271018 by
hp2sa.ampr.org (ONXSA BBS) with
SMTP<BR> id AA24803 ; Thu, 13 Mar
2014 03:17:52 EST<BR>From: =?BIG5?B?pWqo5a21vNY=?= <<A
href="mailto:springboard@yahoo.com">springboard@yahoo.com</A>><BR>To:
"awze" <<A
href="mailto:awze@awze.com">awze@awze.com</A>><BR>Subject:<BR> =?BIG5?B?RGlzbmV5qOC1o7nPrtGhQqlfpf2lzaeupHCpaiC1paqpxXao7LTBuc+u0aFCpfq6?=<BR> =?BIG5?B?0KRqpViyTaFJ?=<BR>Date:
Wed, 28 Apr 2004 22:58:06 +0800<BR>MIME-Version: 1.0<BR>Content-Type:
text/html;<BR>
charset="Big5"<BR>Content-Transfer-Encoding: quoted-printable<BR>X-Priority:
3<BR>X-MSMail-Priority: Normal<BR>X-Mailer: Microsoft Outlook Express
6.00.2800.1106<BR>X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1106<BR>Message-Id: <<A
href="mailto:24804@hp2sa.ampr.org">24804@hp2sa.ampr.org</A>></SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Took this JNOS offline until the
problem solve.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Please can anyone know a way to
deny receiving spam mail in jnos.</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">Thanks,</SPAN><O:P></O:P></P></DIV>
<DIV>
<P style="MARGIN-LEFT: 0.5in" class=MsoNormal><SPAN
style="FONT-FAMILY: 'Arial','sans-serif'">José /
HP2AT</SPAN><O:P></O:P></P></DIV></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>