Re: closing exims open relay - something to do with the percent hack

2003-07-02 Thread Donovan Baarda
On Wed, 2003-07-02 at 01:09, Shri Shrikumar wrote:
 Hi,
 
 I just did an open relay test on one of my servers and to my surprise
 found that it in an open relay. In particular, it accepts emails to the
 form of
 
 [EMAIL PROTECTED]
 
 where here.com is a local domain within exim.

Check the bug reports on exim. There is a case where a stock standard
Debian install of exim (and possibly postfix) can turn out to be an open
relay.

What happens is the the satellite email server blindly forwards email
to the smart-host, and the smart-host blindly trusts the satellite
system because it's within the trusted domain. Between the two of them
they become an open relay. 

-- 
Donovan Baarda [EMAIL PROTECTED]
http://minkirri.apana.org.au/~abo/




closing exims open relay - something to do with the percent hack

2003-07-01 Thread Shri Shrikumar
Hi,

I just did an open relay test on one of my servers and to my surprise
found that it in an open relay. In particular, it accepts emails to the
form of

[EMAIL PROTECTED]

where here.com is a local domain within exim.

I have tried setting

percent_hack_domains=

but that has not helped. I have also tried adding the line

no_relay_match_host_or_sender

as recommended in the docs but I dont actually know what it doesn.

Any help in resolving this appreciated.

Shri

-- 

Shri Shrikumar   U R Byte Solutions   Tel:   0845 644 4745
I.T. Consultant  Edinburgh, Scotland  Mob:   0773 980 3499
 Web: www.urbyte.com  Email: [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part


Re: closing exims open relay - something to do with the percent hack

2003-07-01 Thread Tomasz Papszun
On Tue, 01 Jul 2003 at 16:09:38 +0100, Shri Shrikumar wrote:
 Hi,
 
 I just did an open relay test on one of my servers and to my surprise
 found that it in an open relay. In particular, it accepts emails to the
 form of
 
 [EMAIL PROTECTED]
 
 where here.com is a local domain within exim.
 
 I have tried setting
 
 percent_hack_domains=
 
 but that has not helped. I have also tried adding the line
 

Won't commenting it entirely out  (adding # in front of this) help?

 no_relay_match_host_or_sender
 
 as recommended in the docs but I dont actually know what it doesn.

Little using exim, neither do I.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



closing exims open relay - something to do with the percent hack

2003-07-01 Thread Shri Shrikumar
Hi,

I just did an open relay test on one of my servers and to my surprise
found that it in an open relay. In particular, it accepts emails to the
form of

[EMAIL PROTECTED]

where here.com is a local domain within exim.

I have tried setting

percent_hack_domains=

but that has not helped. I have also tried adding the line

no_relay_match_host_or_sender

as recommended in the docs but I dont actually know what it doesn.

Any help in resolving this appreciated.

Shri

-- 

Shri Shrikumar   U R Byte Solutions   Tel:   0845 644 4745
I.T. Consultant  Edinburgh, Scotland  Mob:   0773 980 3499
 Web: www.urbyte.com  Email: [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part


Re: closing exims open relay - something to do with the percent hack

2003-07-01 Thread Tomasz Papszun
On Tue, 01 Jul 2003 at 16:09:38 +0100, Shri Shrikumar wrote:
 Hi,
 
 I just did an open relay test on one of my servers and to my surprise
 found that it in an open relay. In particular, it accepts emails to the
 form of
 
 [EMAIL PROTECTED]
 
 where here.com is a local domain within exim.
 
 I have tried setting
 
 percent_hack_domains=
 
 but that has not helped. I have also tried adding the line
 

Won't commenting it entirely out  (adding # in front of this) help?

 no_relay_match_host_or_sender
 
 as recommended in the docs but I dont actually know what it doesn.

Little using exim, neither do I.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.