-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeremy Kitchen wrote:
> On Thursday 20 May 2004 07:00 pm, blist wrote:
>>Here is my run tcpserver script for qmail-smtpd:
>>
>>exec /usr/local/bin/softlimit -m 10000000 \
>>/usr/local/bin/tcpserver -v -H -R -l "$LOCAL" -x \
>>/usr/local/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" -u \
>>"$QMAILDUID" -g vchkpw 192.168.5.50 25 \
>>/usr/local/bin/fixcrio \
>>/usr/local/bin/rblsmtpd -r relays.ordb.org \
>>/var/qmail/bin/qmail-smtpd ps1.prostream.net \
>>/usr/local/vpopmail/bin/vchkpw /bin/true &

Simple, remove the hostname, and all should be well.

>
>
> what's the value of $QMAILDUID in that script?
>
> also, if you take out the hostname you're an open relay, because you're
> authenticating with /bin/true

Wrong, vchkpw needs another program to change the directory for, check
the way qmail-pop3d works.

pop3-popup checkpasswrd realpop3 (Which is now in the users directory)

If vchkpw is not given another argument to execute after it auth's the
user, qmail-smtpd has no way to check if it was successfull.

>
> -Jeremy
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFArV1GJukONu5DUaQRAt/SAJ9Ubh1+KnXuKN9p+AGtnz3OvPEi4wCgmS2k
lqa015oQi4ITRgNw0nECxRI=
=LOQ4
-----END PGP SIGNATURE-----

Reply via email to