Security Incidents: AnalogX Proxy SMTP server relay

["Claymore" <claymore () adelphia net>]

Increasing numbers of users who are using AnalogX Proxy SMTP servers are
being reported for mail open relays, though when a standard relay check is
used it comes back as not relaying.

Due to the volume of reports, multiple identical messages sent from a
variety of hosts using this product, and after speaking with the users, I am
fairly certain that these are in fact relayed and not sent from the site. I
am assuming that someone has found a way to force the default install of the
AnalogX SMTP server to relay mail. I was hoping that someone had some ideas
how this might be possable so that I can aid our users in understanding why
this is happening and help them correct the issue.

Thanks

Claymore
the unprofound


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com