On Fri, 9 Feb 2007, Jason R. Mastaler wrote:

> This is what I do too. Postfix expects local domain mail to be relayed
> either through the local network or though a SASL authenticated
> session. All other mail that arrives with an envelope sender claiming
> to be local is simply dropped right there.

Yes, that is how it is here too.
But that doesn't help on this kind of spam
.......
    From [EMAIL PROTECTED] Thu Feb  8 18:14:44 2007
    Return-Path: [EMAIL PROTECTED]
    [ snipped some Received: headers transfering to another internal machine]
    X-Authentication-Warning: trr.multitalents.net: tim set sender to [EMAIL 
PROTECTED] using -f
    Received-SPF: none (mail.multitalents.net: domain of [EMAIL PROTECTED] does 
not designate permitted sender hosts)
    Received: from 62-101-102-101.ip.fastwebnet.it 
(62-101-102-101.ip.fastwebnet.it [62.101.102.101])
        by mail.multitalents.net (8.12.11.20060614/8.12.11) with SMTP id 
l192ET0R020313;
        Thu, 8 Feb 2007 18:14:31 -0800
    X-Originating-IP: 152.160.176.218 by smtp.62.101.102.101;  Thu, 08 Feb 2007 
21:14:13 -0500
    Message-ID: <[EMAIL PROTECTED]>
    From: "Wesley Bartlett" <[EMAIL PROTECTED]>
    Reply-To: "Wesley Bartlett" <[EMAIL PROTECTED]>
    To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
    Subject: Cial1s S0ft Tabs - Impress her
    Date: Thu, 08 Feb 2007 21:14:13 -0500
    Content-Type: text/plain;
    Content-Transfer-Encoding: 7Bit
    X-SCO-PAD: XXXXXX
    Content-Length: 852
    Status: RO
    X-Status: 
    X-Keywords:                 
    X-UID: 421
.......

TMDA passes it through unchallenged to the valid local users because
the Reply-To: is a valid local user.

-- 
Tim Rice                                Multitalents    (707) 887-1469
[EMAIL PROTECTED]


_________________________________________________
tmda-workers mailing list ([email protected])
http://tmda.net/lists/listinfo/tmda-workers

Reply via email to