Qmail-ldap accepts dash mails.

[Mikkel Kruse Johnsen]

Hi

I have a problem, have just been pointed out that my qmail ldap is an reverse open relay, meaning that sending a mail to a non existing user on my domain will result i a bounce to the "mail from:" address and that can be faked.

So adding "RCPTCHECK" to the environment should do it.

    :allow,SMTPAUTH="",RETURNMXCHECK="",SANITYCHECK="",RCPTCHECK="",REJECTEXEC="",QHPSI="/usr/bin/clamdscan",QHPSIARG1="--no-summary",LOGLEVEL="4"

That will make the SMTP connection disconnect if the user is not in the LDAP.

But sending a mail to a valid user with "-something" after like "[EMAIL PROTECTED]" will get accepted. I have compiled without DASH_EXT.

What could be the problem ?

---

LDAPFLAGS=-DALTQUEUE -DBIGBROTHER -DBIGTODO -DDATA_COMPRESS -DEXTERNAL_TODO -DIGNOREVERISIGN -DQLDAP_CLUSTER -DQMQP_COMPRESS -DQUOTATRASH -DSMTPEXECCHECK

---
2006-04-25 15:14:05.820754500 tcpserver: ok 23257 0:192.38.9.203:25 :130.226.47.171::36867
2006-04-25 15:14:05.820757500 qmail-smtpd 23257: connection from 130.226.47.171 (unknown) to 0
2006-04-25 15:14:05.820760500 qmail-smtpd 23257: enabled options: sanitycheck returnmxcheck spfbehavior-fail(3) rcptcheck smtp-auth rejectexecutables
2006-04-25 15:14:05.821789500 qmail-smtpd 23257: remote ehlo: mail.cbs.dk
2006-04-25 15:14:05.823641500 qmail-smtpd 23257: mail from: [EMAIL PROTECTED]
2006-04-25 15:14:05.831048500 qmail-smtpd 23257: SPF checking comleted
2006-04-25 15:14:05.900054500 qmail-smtpd 23257: rcpt to: [EMAIL PROTECTED]
2006-04-25 15:14:05.900058500 qmail-smtpd 23257: recipient verify, recipient not in goodmailaddr
2006-04-25 15:14:05.900061500 qmail-smtpd 23257: recipient verify, recipient is local
2006-04-25 15:14:05.923562500 qmail-smtpd 23257: recipient verify OK
2006-04-25 15:14:05.925482500 qmail-smtpd 23257: go ahead
2006-04-25 15:14:05.955486500 qmail-smtpd 23257: message queued: 1145970845 qp 23259 size 1199 bytes
2006-04-25 15:14:05.961209500 qmail-smtpd 23257: quit, closing connection
2006-04-25 15:14:05.961567500 tcpserver: end 23257 status 0

----

/var/qmail/bin/qmail-ldaplookup -m [EMAIL PROTECTED]

Searching ldap for: (&(objectClass=qmailuser)(|(mail=[EMAIL PROTECTED])([EMAIL PROTECTED])))
under dn: dc=metier,dc=dk
No entries found.

----