Two weeks ago, I explained the process a message takes before being sent
out. Please check the archive for the reason why the headers are stripped.
If someone want to rewrite the software to keep the headers, please contact
me. Please realize I do keep a record of the header in case I need to track
an abuser.
Frankly the IP address on the header gives a false sense of security. The
IP address is obtained from the sending server, not the actual connected IP
address (If someone knows how to change this in sendmail, please contact
me). I looked and can not find how to create a rule to change this
behavior. The sending server can tell it anything, and sendmail will
blindly believe it. When I send things from my Linux box at home, sendmail
records my IP address as 172.16.1.98. Many, many boxes are misconfigured to
send the IP address of 127.0.0.1. So this may or may not be of use.
The problem with the reverse DNS is known. The problem is I do not control
the reverse. The collocation facility does. I only control the forward
lookup. If this is a MAJOR problem to people I will request the change. I
did not realize this was a big issue. Most SMTP servers will allow messages
as long as the IP address is resolvable.
Finally, remember there are three ways to read this group, mailing list,
newsfeed, and website. Most of this stuff is customized open source
software. I have had to learn way more about Perl, PHP, SQL, and SMTP then
I ever thought I would need to know to run a simple mailing list. Most of
this stuff is a hack job I put together in my spare time. If anyone has any
ideas for improvement, I recognize I am not an expert and would love to hear
any and all ideas.
Currently I am entertaining the idea of dumping Sendmail and using Postfix.
Any postfix experts that can give me a hand? In particular, I want to
change the outbound Postfix headers to hide the Majordomo outbound address.
This is for security reasons. I can do this with sendmail, but can not find
it in the postfix configuration (although I have not looked too hard).
Another idea is to have multiple servers. One in Europe, One in Asia, and
our main server in the US. We would need to obtain new listserver software,
or modify Majordomo, to subscribe and unsubscribe people to the correct
server using the alias [EMAIL PROTECTED]
And another idea is to rebuild the "school" section to make it a more
dynamic place for people to work. Again, any ideas/suggestions on software
to do that.
Take care,
Paul Borghese
----- Original Message -----
From: "James Wilson"
To:
Sent: Wednesday, June 27, 2001 1:45 AM
Subject: RE: MyGirlFriend Dogs [7:9891]
> A better question is why the Groupstudy mail server does NOT record the IP
> address of the submitter of the message in the headers. Sendmail records
> this information by default unless you configure it not to do so. For
that
> matter, why the groupstudy mail server does not have RFC compliant DNS
> records configured for their mail server - the forward and reverse dns do
> not match, causing TCP wrappers to record it as a security risk in your
> syslogs. Its been broken for a long time...
>
> -
> James D. Wilson, CCDA, MCP
> "non sunt multiplicanda entia praeter necessitatem"
> William of Ockham (1285-1347/49)
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> fgdfg
> Sent: Monday, June 25, 2001 6:37 PM
> To: [EMAIL PROTECTED]
> Subject: MyGirlFriend Dogs [7:9891]
>
>
> Nice dog...
>
> [GroupStudy.com removed an attachment of type application/x-msdownload
which
> had a name of BullBull.exe]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=10102&t=9891
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
