https://bugs.koozali.org/show_bug.cgi?id=11771
Bug ID: 11771
Summary: /var/service/qpsmtpd/config/relayclients has extra ip
addresses
Classification: Contribs
Product: SME Contribs
Version: Futur
Hardware: ---
OS: ---
Status: CONFIRMED
Severity: normal
Priority: P3
Component: smeserver-wireguard
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
Target Milestone: ---
Created attachment 6605
--> https://bugs.koozali.org/attachment.cgi?id=6605&action=edit
contents of /var/service/qpsmtpd/config/relayclients
Contents of relayclients after
expand-template /var/service/qpsmtpd/config/relayclients
Wireguard installed.
qpsmtpd=service
Authentication=enabled
BadCountries=BG
Bcc=disabled
BccMode=off
BccUser=maillog
DKIMSigning=enabled
DNSBL=enabled
Fail2Ban=enabled
GeoIP=enabled
Instances=40
InstancesPerIP=5
LogLevel=6
MaxScannerSize=25000000
MaximumDateOffset=0
PatternsScan=enabled
Proxy=transparent
RBLLIST=psbl.surriel.com,zen.spamhaus.org
RBLList=zen.spamhaus.org,whois.rfc-ignorant.org
RHSBL=disabled
RelayRequiresAuth=disabled
SBLList=
TCPPort=25
TCPProxyPort=25
TlsBeforeAuth=1
UBLList=multi.surbl.org:8-16-64-128,black.uribl.com,rhsbl.sorbs.net
URIBL=disabled
VirusScan=enabled
access=public
qplogsumm=disabled
status=enabled
tnef2mime=enabled
[root@mailserver relayclients]#
[root@mailserver relayclients]# db networks show
172.23.0.0=network
Mask=255.255.252.0
Wireguard=wg0
192.0.0.0=network
Mask=240.0.0.0
Wireguard=wg0
192.168.3.0=network
Mask=255.255.255.0
SystemLocalNetwork=yes
192.168.4.0=network
Mask=255.255.255.0
Wireguard=wg0
[root@mailserver relayclients]#
We think these contents resulted in the server being an open relay for those Ip
addresses. I*n particular the offending server was on Ip 195.133.18.11.
--
You are receiving this mail because:
You are the assignee for the bug._______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/