/usr/local/bin/tcpserver -c 550 -x /etc/security/tcprules/inbound.cdb \
-u qmaild -g nofiles 0 smtp /var/qmail/bin/qmail-smtpd &

with aforementioned line present in the inrules file compiled to 
create inbound.cdb did let it through.  i don't know why.

qmail-smtp is modified to print out the IP of the sender.  that was 
209.244.137.13.  Level3 communications eliminated the user 
connected to that IP.  That is when he went away.  The mail 
flowed until then.  My servers were bogged down to prove it.

Everything works w/ tcpserver for every other situation except
for this character yesterday and I believe the same guy a few
weeks back.

> No. If everything is set up correctly and you have the above 
> deny line in your
> rules file, then connections from 209.244.137.13 will not be 
> allowed, period.
> There's no way for anything to "slip past" tcpserver. 
> qmail-smtpd will never be
> invoked if the connection is from 209.244.137.13, so no 
> manipulation of
> envelope sender or disguising something as a bounce or 
> anything else will allow
> mail from this IP address to get through.
> 
> As someone else said, tcpserver doesn't know anything about 
> mail. All it can do
> is either allow or deny a connection and set environment 
> variables based on IP
> address.
> 
> Chris


_____________________________________________
NetZero - Defenders of the Free World
Click here for FREE Internet Access and Email
http://www.netzero.net/download/index.html

Reply via email to