On Tue, Sep 07, 1999 at 05:39:15PM +0800, [EMAIL PROTECTED] wrote:
> Hello,
>
> I am a rookie on using qmail, but I can feel the power of it, really
> amazing.
>
> I have several questions about the implementation of qmail. If possible,
> please give me some advice. Thanks.
>
> (1) Anti-relay Issue
>
> Any security risk about Mail Relaying? If I really want to get rid of
> relay, which module or file is required to be modified? According to Mr.
> Peter Samuel's qmail tutorial at the recent SAGE-AU '99 conference, he
> states that qmail can be configured to prevent mail relaying by specifying
> valid incoming domains in /var/qmail/control/rcpthosts. Is it the case?
Yes. man qmail-smtpd for more info.
> (2) EXPN and VRFY Issue
>
> Any security risk about EXPN and VRFY? I can't find any information about
> them on qmail released notes. Is that mean I can ignore these issues? Is it
> enabled as default on qmail?
qmail-smtpd does not support EXPN, and always gives a positive response
to VRFY. You can quit worrying about them.
--
See complete headers for more info
