On Wed, Apr 26, 2006 at 08:49:27AM +0200, Mikkel Kruse Johnsen wrote: > Hi > > I have a problem, have just been pointed out that my qmail ldap is an > reverse open relay, meaning that sending a mail to a non existing user > on my domain will result i a bounce to the "mail from:" address and that > can be faked. > > So adding "RCPTCHECK" to the environment should do it. > > > :allow,SMTPAUTH="",RETURNMXCHECK="",SANITYCHECK="",RCPTCHECK="",REJECTEXEC="",QHPSI="/usr/bin/clamdscan",QHPSIARG1="--no-summary",LOGLEVEL="4" > > That will make the SMTP connection disconnect if the user is not in the > LDAP. > > But sending a mail to a valid user with "-something" after like > "[EMAIL PROTECTED]" will get accepted. I have compiled without > DASH_EXT. > > What could be the problem ? >
Hmpf. Smells like a bug. I'll have a look at it. > --- > > LDAPFLAGS=-DALTQUEUE -DBIGBROTHER -DBIGTODO -DDATA_COMPRESS > -DEXTERNAL_TODO -DIGNOREVERISIGN -DQLDAP_CLUSTER -DQMQP_COMPRESS > -DQUOTATRASH -DSMTPEXECCHECK > > --- > 2006-04-25 15:14:05.820754500 tcpserver: ok 23257 > 0:192.38.9.203:25 :130.226.47.171::36867 > 2006-04-25 15:14:05.820757500 qmail-smtpd 23257: connection from > 130.226.47.171 (unknown) to 0 > 2006-04-25 15:14:05.820760500 qmail-smtpd 23257: enabled options: > sanitycheck returnmxcheck spfbehavior-fail(3) rcptcheck smtp-auth > rejectexecutables > 2006-04-25 15:14:05.821789500 qmail-smtpd 23257: remote ehlo: > mail.cbs.dk > 2006-04-25 15:14:05.823641500 qmail-smtpd 23257: mail from: > [EMAIL PROTECTED] > 2006-04-25 15:14:05.831048500 qmail-smtpd 23257: SPF checking comleted > 2006-04-25 15:14:05.900054500 qmail-smtpd 23257: rcpt to: > [EMAIL PROTECTED] > 2006-04-25 15:14:05.900058500 qmail-smtpd 23257: recipient verify, > recipient not in goodmailaddr > 2006-04-25 15:14:05.900061500 qmail-smtpd 23257: recipient verify, > recipient is local > 2006-04-25 15:14:05.923562500 qmail-smtpd 23257: recipient verify OK > 2006-04-25 15:14:05.925482500 qmail-smtpd 23257: go ahead > 2006-04-25 15:14:05.955486500 qmail-smtpd 23257: message queued: > 1145970845 qp 23259 size 1199 bytes > 2006-04-25 15:14:05.961209500 qmail-smtpd 23257: quit, closing > connection > 2006-04-25 15:14:05.961567500 tcpserver: end 23257 status 0 > > ---- > > /var/qmail/bin/qmail-ldaplookup -m [EMAIL PROTECTED] > > Searching ldap for: > (&(objectClass=qmailuser)(|([EMAIL PROTECTED])([EMAIL PROTECTED]))) > under dn: dc=metier,dc=dk > No entries found. > > ---- -- :wq Claudio
