https://bugs.koozali.org/show_bug.cgi?id=11771

            Bug ID: 11771
           Summary: /var/service/qpsmtpd/config/relayclients has extra ip
                    addresses
    Classification: Contribs
           Product: SME Contribs
           Version: Futur
          Hardware: ---
                OS: ---
            Status: CONFIRMED
          Severity: normal
          Priority: P3
         Component: smeserver-wireguard
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
  Target Milestone: ---

Created attachment 6605
  --> https://bugs.koozali.org/attachment.cgi?id=6605&action=edit
contents of /var/service/qpsmtpd/config/relayclients

Contents of relayclients after 

expand-template /var/service/qpsmtpd/config/relayclients

Wireguard installed.

qpsmtpd=service
    Authentication=enabled
    BadCountries=BG
    Bcc=disabled
    BccMode=off
    BccUser=maillog
    DKIMSigning=enabled
    DNSBL=enabled
    Fail2Ban=enabled
    GeoIP=enabled
    Instances=40
    InstancesPerIP=5
    LogLevel=6
    MaxScannerSize=25000000
    MaximumDateOffset=0
    PatternsScan=enabled
    Proxy=transparent
    RBLLIST=psbl.surriel.com,zen.spamhaus.org
    RBLList=zen.spamhaus.org,whois.rfc-ignorant.org
    RHSBL=disabled
    RelayRequiresAuth=disabled
    SBLList=
    TCPPort=25
    TCPProxyPort=25
    TlsBeforeAuth=1
    UBLList=multi.surbl.org:8-16-64-128,black.uribl.com,rhsbl.sorbs.net
    URIBL=disabled
    VirusScan=enabled
    access=public
    qplogsumm=disabled
    status=enabled
    tnef2mime=enabled
[root@mailserver relayclients]# 

[root@mailserver relayclients]# db networks show
172.23.0.0=network
    Mask=255.255.252.0
    Wireguard=wg0
192.0.0.0=network
    Mask=240.0.0.0
    Wireguard=wg0
192.168.3.0=network
    Mask=255.255.255.0
    SystemLocalNetwork=yes
192.168.4.0=network
    Mask=255.255.255.0
    Wireguard=wg0
[root@mailserver relayclients]# 

We think these contents resulted in the server being an open relay for those Ip
addresses. I*n particular the offending server was on Ip 195.133.18.11.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Mail for each SME Contribs bug report
To unsubscribe, e-mail [email protected]
Searchable archive at https://lists.contribs.org/mailman/public/contribteam/

Reply via email to