Re: Paranoid newbie seeks reasurrance

[Chris Ellens]

On 21.01.2003 00:02, Global Homes Webmaster at [EMAIL PROTECTED] wrote:

 > On 01/20/03 at 12:12, Chris Ellens opined:

-snip-

 >> OK, I confess I'm so paranoid I have the following entry in my

 router:   *.com = NULL

 That's way overboard paranoid for most set-ups. Since probably a very large
 proportion of incoming mail on most servers will have *.com Return-Paths,
 routing *.com to NULL will mean that you'll have to add router entries for

 > any and all specific .com domains that you find acceptable.

Yes, I realize it's overkill, but at this stage I'm still testing my SIMS configuration. When I'm confident I've got it right, I'll remove that entry (and similar ones for other TLDs). After I opened port 25 I was surprised at how quickly I started getting hit by unsolicited messages.

-snip-

 >> 02:17:00 5 ROUTER Parser: NULL -> NULL()

 02:17:00 4 SMTP-050([64.169.240.3]) Sending 250 <[EMAIL PROTECTED]>
 Welcome to the Black Hole\r\n
 02:17:00 5 SMTP-050([64.169.240.3]) OT 53 of 53 bytes sent, Flags=0

 Ummm, correct me if I'm wrong, but did I just relay a message to
 "snowbaby"?

 > Nope. SIMS sent a 250 result code back to the remote host, indicating that

 the message was accepted and routed into 'the Black Hole' (i.e. into the
 Void). Your routing to NULL is working.  8^)

But my concern is that what if I hadn't had my *.com entry in the router? It seems from these logs that that was the only thing that avoided a relay? Shouldn't the message be rejected rather than accepted, because the intended recipient is in a foreign domain?

 >> I've got "Relay for Clients only" (and only one IP address in the

 clients list). I've got "Verify Return Path" and "Use Blacklist

 >> Servers". Any elightenment as to how I can better protect my server

 would be appreciated.

 With those settings/features enabled it's protected about as well as it's

 > going to be.

But if I've done it correctly, shouldn't SIMS be sending a message to the spam originator indicating that this server does not relay?

Thanks for your help.

--
Chris Ellens
Nepean, Ontario Canada

#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>