Based on Alex's comments this is still "security by obscurity" so I am less
vulnerable, but still vulnerable.



 -----Original Message-----
From:   schmonz [mailto:schmonz]  On Behalf Of Amitai Schlair
Sent:   Monday, December 04, 2000 2:52 PM
To:     [EMAIL PROTECTED]
Subject:        Re: Open Relay questionnaire

Eric Walters wrote:

> I am looking for some input on this as it relates to virtual hosting.  My
> users are all remote and I am trying to find a happy medium between
security
> and user-friendliness.  Is there a way to ensure that unless the rcpt to:
or
> mail from: contain a local domain qmail will not deliver the message?

If by "local domain" you mean "locally hosted virtual domain", then I
think qmail already does this by default. Perhaps I misunderstand. At
any rate, you may find the following patch helpful:

    <URL:http://www.palomine.net/qmail/relaymailfrom.patch>

- Amitai

Reply via email to