Umm, no. If this is the same setup you described in your previous email (which I haven't had a chance to investigate yet, sorry), it looks like you're not supplying the "local-domains-file" or "access-file" options, so spamdyke doesn't have enough information to control relaying (i.e. it doesn't know which domains are local or who has permission to relay, so it has to trust qmail to control relaying). If those options are given, spamdyke will always set the RELAYCLIENT variable and control relaying itself. That will fix the problem: spamdyke will prevent relaying from non-authenticated senders and qmail-smtpd will accept non-local recipients passed by spamdyke.
-- Sam Clippinger On Mar 21, 2012, at 5:49 PM, Eric Shubert wrote: > On 03/20/2012 03:00 PM, Eric Shubert wrote: >> I did a little testing, and this appears to be just a bug in the >> config-test. With these settings, cram-md5 is not advertised, and >> authentication does work. > > After a little more testing, I discovered that qmail-smtpd (w/chkuser) > is rejecting non-local emails, because it doesn't realize that the > sender has authenticated. > > If I set the RELAYCLIENT variable in the tcp.smtp file (which would > normally create an open relay), will spamdyke still honor the > relay-level=normal > (default) setting, and reject unauthenticated attempts to relay? > > I ask this because the documentation about spamdyke's access-file says this: > Remote servers are allowed to relay if the environment variable > RELAYCLIENT is set to any value. Most qmail guides recommend an entry > like this one: > 11.22.33.44:allow,RELAYCLIENT="" > > and it's not clear to me if spamdyke would see this variable set by > tcp.smtp and allow access based on this. > > As always, thanks Sam. > > -- > -Eric 'shubes' > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
