my sendmail being attacked?

[Gerry Doris]

> but I don't understand how it get to my smtp. I fetchmail messages from
> that cityu pop, which would be procmail into my mbox. It seems that the
> attempt to relay the message happened during the procmail stage...
>
> yes, I followed advices to allow only localhost and my own subnet in
> /etc/mail/access.
>
> Matthew Carpenter wrote:
>> Someone was trying out your MTA as an open relay, and sendmail blocked
>> it correctly  :)
>>

Double check your firewall.  It sure looks like port 25 is open to the
world or they wouldn't have been able to access your mail server.  You
can't do it from the mailserver itself.  Either telnet to port 25 from a
system outside your network (ie from the other side of your firewall) or
get someone else to do it for you.  If there is a connection then your
port 25 is open.

Gerry