 Similar problem
Folks-
Just wanted to share that I had a similar problem and I diagnosed that a config got changed during an upgrade to 5.0, including my local subnet in the list of trusted hosts for the MTA...
This normally wouldn't be a problem for most folks, but if you happen to be SNATing the traffic going to the server, you end up with everyone in the trusted hosts, and thus, end up with an open relay...
In my case, the server is behind a BIGIP... that certainly doesn't REQUIRE a SNAT, but that is the best config in my case, so I decided to keep it...
so... two choices - REMOVE your local subnet from the trusted hosts lists (and make everyone authenticate - thats what I did), or remove the SNAT...
Regards,
Andrew |