I just recently got my own dedicated server - it uses the Sphera Hosting Director.

Today I received a pile of email from various anti-spam organizations complaining about spam originating from my server. The automated ones have already blacklisted me, the others have given me a few days 'grace' to sort out my 'open relay'.

Obviously I do NOT want to support spamming. BUT it turns out that my server is open relay becuase of a 'flaw' in the Sphera software.

I use Dialtone Internet - i complained to them - they complained to Sphera. Sphera is now 'working on a fix'.

Does anyone have any suggestions or experince with this???

I am not too familiar with that product, but if it is a security risk, I would severely press upon your provider to get resolution.

Unless you have some love for sendmail, go with qmail. Acually qmail+vpopmail+mysql+smtp-auth is very easy to manage and secure.

Thanks for the replys

I do have to use sendmail because of the way Sphera Hosting director controls the server environment.

It seems that the issue was 'fixed' with a patch - or so i was advised today by DI.

But now that I am aware of this potential security risk i want to do everything i can to prevent it. I'd like to implement some sort of pop before SMTP solution.

Can anyone recommend one??

You have no other options but what sphera gives you. I would contact DI and see what they say, but sphera as is, cannot be modified and you cannot install your own mail system.