Am I being used as a open relay ???

[robert_pang@sd63.bc.ca]

Hi Everyone

I have noticed in my admin console under "Server Statistics" large peeks under last 48 hours. They are 4 times my normal volume and I am afraid I am being spammed or being used as a relay. Is there a fast way to scan the logs and see if someone is sending extra mail through my server? Or are there some holes I need to check on the server ZCS 6.0.4 / Ubuntu 64 8.0.4

[uxbod]

Out of the box Zimbra does not act as a open relay. You can check your server using Email Server Test - Online SMTP diagnostics tool - MxToolbox. You could also be suffering from backscatter.

[phoenix]

Originally Posted by robert_pang@sd63.bc.ca

Hi Everyone

I have noticed in my admin console under "Server Statistics" large peeks under last 48 hours. They are 4 times my normal volume and I am afraid I am being spammed or being used as a relay. Is there a fast way to scan the logs and see if someone is sending extra mail through my server? Or are there some holes I need to check on the server ZCS 6.0.4 / Ubuntu 64 8.0.4

Have you tried some of the tips in this wiki article: Improving Anti-spam system - Zimbra :: Wiki - specifically the Discarding Emails Sent to Invalid Addresses section? You should also add some RBLs (spamhaus is particularly good) and search the forums for the word 'backscatter' plus there are specific threads on improving the anti-spam system.