Qmail relaying by bouncing to reply-to

2001-07-31 Thread Erik Lindahl


Hi,

We've had qmail working splendid for a while, but
just got a new problem when the free RBL services were
discontinued and there are less sites we refuse based on ip:

Apparently, spammers send mails to nonexistent users and
rely on qmail bouncing this to the reply-to adress. By setting
the reply-to to a suitable adress you get relaying, albeit
wrapped in a qmail bounce-message.

Now, it is of course possible that we configured everything
wrong, so we'll be happy to stand corrected :-)

However, as far as I get it, qmail-smtpd never checks for
users (like e.g. sendmail that bounces on smtpd-level).

I guess we're not the first ones to be hit by this, and
it should be specific to qmail, so what should we do?

Sincerely,

Erik
-
Erik Lindahl, PhD[EMAIL PROTECTED]
Dept. Biophysical Chemistry, Groningen University, THE NETHERLANDS
Phone: +31 50 3634335Fax: +31 50 3634800
(You can also reach me as [EMAIL PROTECTED] and [EMAIL PROTECTED])
Hi! I'm a mutated .sig virus! Put me in ~/.signature to multiply me!




Re: Qmail relaying by bouncing to reply-to

2001-07-31 Thread Chris Johnson

On Tue, Jul 31, 2001 at 06:39:45PM +0200, Erik Lindahl wrote:
 We've had qmail working splendid for a while, but
 just got a new problem when the free RBL services were
 discontinued and there are less sites we refuse based on ip:
 
 Apparently, spammers send mails to nonexistent users and
 rely on qmail bouncing this to the reply-to adress. By setting
 the reply-to to a suitable adress you get relaying, albeit
 wrapped in a qmail bounce-message.

qmail will not bounce anything to a reply-to address; it bounces to the
envelope sender.

It's not likely that spammers are doing what you say. It's more likely that
they think that the address to which they think they're sending spam is valid,
but it isn't. I don't know where they get a hold of these bogus addresses.
There's a whole slew of spam-only addresses I get mail for; these addresses
have never been valid.

It really makes no sense to relay mail this way, since a spammer would have to
send one message for each spam recipient. If he does this, he might as well
just send the mail directly to his victims.

Chris

 PGP signature


Re: Qmail Relaying

2001-06-20 Thread Jörgen Persson

On Wed, Jun 20, 2001 at 12:24:11PM +0700, Eko Yulianto wrote:
 Dear Netter,
 
 I use FreeBSD 4.3
 Qmail 1.03
 Checkpassword
 and tcpserver.
 
 How to make my SMTP cannot access form outside.
 Right now, I use tcpserver 
 
 202.171.1.0,allow,RELAYCLIENT=

A typo???^ 

 
 and I try to relay my SMTP from outside and work.
 How to block it, so only my user can use this SMTP...


It ought to be a '':'' after the adress, i.e.:

  202.171.1.0:allow,RELAYCLIENT=

There's more information about this in Bernsteins FAQ[1].

Jörgen
[1] http://cr.yp.to/qmail/faq/servers.html#authorized-relay



Qmail Relaying

2001-06-19 Thread Eko Yulianto

Dear Netter,

I use FreeBSD 4.3
Qmail 1.03
Checkpassword
and tcpserver.

How to make my SMTP cannot access form outside.
Right now, I use tcpserver 

202.171.1.0,allow,RELAYCLIENT=

and I try to relay my SMTP from outside and work.
How to block it, so only my user can use this SMTP...


Please Help !


Thanks


_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com




qmail: relaying

2001-04-10 Thread John Cope

OK..  I've read the relaying and selective relaying docs, but I'm still
confused as to what I need to do.  Maybe, I have a case of cranial rectitus.
(Having ones head up ones A##)  I'm setting an ISP that will service upwards
of 50,000 to 5,000,000 clients, most of which will be accessing our servers
through an Internet Appliance device.  How do I provision relaying for these
users.   They will be connecting to the Internet through their local POP's,
with different IP's.  Do I need to include of these IP's in the tcp.smtp
file, or is there a better way to handle this?

- John



qmail relaying

2000-03-21 Thread Jonathan Fortin



Hello,

How do i deny internet ips from using my mail server to email people that
isnt in our company,

Like [EMAIL PROTECTED]

to [EMAIL PROTECTED]

using our mail server., i just want the to: to be ourdomain.com,,

thanks

Jonathan Fortin, Network Administrator
[EMAIL PROTECTED]
--
Revelex Canada
6830 Park Avenue Suite 209
Montreal,Qc
H3N 1W7
business: (514) 274-5120 ext. 228
cellular: (514) 242-7325






Re: qmail relaying

2000-03-21 Thread Dave Sill

"Jonathan Fortin" [EMAIL PROTECTED] wrote:

How do i deny internet ips from using my mail server to email people that
isnt in our company,

Like [EMAIL PROTECTED]

to [EMAIL PROTECTED]

using our mail server., i just want the to: to be ourdomain.com,,

echo ourdomain.com /var/qmail/control/rcpthosts

-Dave