I removed sender_nocheck . I added it back in and set it to "0" . I am running qmailctl cdb after each change.
Still no change . I will try to telnet into the server from another network . -----Original Message----- From: Jon Myers [mailto:[email protected]] Sent: Wednesday, March 27, 2013 1:12 PM To: [email protected] Subject: RE: [qmailtoaster] Relaying Did you really REMOVE sender_nocheck, or did you just set it to 0? I'm guessing you should have just set it to 0. Also, by nature, users should be allowed to relay, as thats how they send mail, but of course they need to authenticate first, unless they are coming from the local network, in which you can typically bypass checking. After editing /etc/tcprules.d/tcp.smtp be sure to rebuild with "/etc/init.d/qmail cdb" (Sorry if I'm pointing out the obvious, just never know who knows what) Also, you specify: 128.:allow,RELAYCLIENT="" which means anyone from 128.0.0.0/8 can freely relay. Is that really what you want? The whole class A? If you telnet into your mail server from outside your network, can you still relay without even logging in as a user? (Do you speak fluent SMTP?) At 12:44 PM 3/27/2013, Rvaught wrote: >I tried removing sender_nocheck=1 and I am still relaying outside >mail on that account. > > > >From: Helmut Fritz [mailto:[email protected]] >Sent: Wednesday, March 27, 2013 12:18 PM >To: [email protected] >Subject: RE: [qmailtoaster] Relaying > >I believe sender_nockeck=1 is the issue? I think that turns off >authentication for senders. others with a lot more expertise in tcp >rules than I will hopefully confirm. > >From: Rvaught >[<mailto:[email protected]>mailto:[email protected]] >Sent: Wednesday, March 27, 2013 8:54 AM >To: ><mailto:[email protected]>[email protected] om >Subject: [qmailtoaster] Relaying > >Somehow I have something setup wrong now and I am having spam being >relayed thru my email server on one email account . I have changed >their password. I think I have something wrong in my tcprules.d >file . I want to allow local users to send mail but block relaying. > >I have : >127.:allow,RELAYCLIENT="" >192.:allow,RELAYCLIENT="" >128.:allow,RELAYCLIENT="" >:allow,BADMIMETYPE="",SENDER_NOCHECK="1",CHKUSER_RCPT_FORMAT="0",CHKUSER_SE NDER_FORMAT="0",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="75",CHKUSER_WRONGRCPTLI MIT="50",QMAILQUEUE="/var/qmail/bin/simscan" > >192 and 128 are my local networks. > > >Rick > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
