Re: How is it that someone can send mails if the account does not exist?

[Gilles Chehade]

On Wed, May 04, 2016 at 06:57:24PM -0500, Ultramedia Libertad wrote:
> Hello
> 

Hello,


> How is it that someone can send mails if the account does not exist?
> 

The short answer is that this is how SMTP works, and this is what allows
several cool features to be usable out of the box.

If you're in a case where you actually want to enforce checking that one
user actually uses a sender address you assigned, you can use `senders':

 table foo { gilles = gil...@poolp.org }

 listen on [...] senders 

which will disallow user gilles from sending mail from anything but the
email address you listed.

In addition you can:

 listen on [...] senders  masquerade

to force OpenSMTPD to rewrite From field inside the mail to match the
address.


-- 
Gilles Chehade

https://www.poolp.org  @poolpOrg

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

How is it that someone can send mails if the account does not exist?

[Ultramedia Libertad]

Hello

How is it that someone can send mails if the account does not exist?


*May  5 01:38:25 mail smtpd[11594]: smtp-out: session 9eabef6a64c06a90:
connecting to smtp+tls://152.163.0.99:25 
(mailin-05.mail.aol.com )May  5 01:38:25
mail smtpd[11594]: smtp-in: session 9eabef2a0f32571d: msgid=b7f40ab3,
status=Ok, from=<**no_exist@*
*mydomain.org >, to=>, size=8279, ndest=1, proto=ESMTPMay  5 01:38:25 mail
smtpd[11594]: smtp-in: session 9eabef25d0306222: msgid=bbe9b11c, status=Ok,
from=>, to=>, size=7208, ndest=1, proto=ESMTP*

my conf is /etc/smtpd.conf















































*myhostname = "mydomain.org "ext = "eth0"int =
"127.0.0.1"pki $myhostname certificate
"/etc/letsencrypt/live/mydomain.org/fullchain.pem
"pki $myhostname key
"/etc/letsencrypt/live/mydomain.org/privkey.pem
"pki $myhostname dhparams
"/etc/ssl/certs/dhparam.pem"# If you edit the file, you have to run
"smtpctl update table aliases"table vrecipients
file:/etc/mail/vrecipients#table vrecipients
mysql:/etc/mail/recipientes.conftable vdomains
mysql:/etc/mail/vdomains.conftable valiases
mysql:/etc/mail/valiases.conftable credentials
mysql:/etc/mail/credenciales.conflisten on lolisten on $ext port 25 listen
on $ext port 587 tls-require pki $myhostname hostname $myhostname auth
listen on lo port 10026 tag SPAM_IN # incoming maillisten on
lo port 10028 tag CLAM_IN # incoming maillisten on lo port 10030 tag
CLAM_OUT # outgoing maillisten on lo port 10033 tag DKIM_OUT # outgoing
mail#receive of spamassassin 10026 tagged SPAM_IN --> send to antivirus
clamvsmtp 10027 --> receive of clamsmtp 10028 tagged CLAM_IN --> send to
lmtp 2525accept tagged SPAM_IN for domain  recipient
 relay via smtp://127.0.0.1:10027
accept tagged SPAM_IN for domain  virtual
accept tagged CLAM_IN for domain  recipient
 relay via lmtp://127.0.0.1:2525 accept
tagged CLAM_IN for domain  virtual # tagged mail
returned from dkimproxy_out relay outaccept tagged DKIM_OUT for any relay#
tagged mail returned from CLAM_OUT relay outaccept tagged CLAM_OUT for
domain  recipient  relay via lmtp://127.0.0.1:2525
accept tagged CLAM_OUT for domain  virtual
accept tagged CLAM_OUT for any relay via smtp://127.0.0.1:10034
accept from any for domain  relay via
smtp://127.0.0.1:10025  # incomming emailsaccept
from local for any relay via smtp://127.0.0.1:10029
 # outgoing mail AV*

Thank You
-- 
editor de sueños