Re: closing exims open relay - something to do with the percenthack

2003-07-02 Thread Donovan Baarda 
On Wed, 2003-07-02 at 01:09, Shri Shrikumar wrote:
 Hi,
 
 I just did an open relay test on one of my servers and to my surprise
 found that it in an open relay. In particular, it accepts emails to the
 form of
 
 [EMAIL PROTECTED]
 
 where here.com is a local domain within exim.

Check the bug reports on exim. There is a case where a stock standard
Debian install of exim (and possibly postfix) can turn out to be an open
relay.

What happens is the the satellite email server blindly forwards email
to the smart-host, and the smart-host blindly trusts the satellite
system because it's within the trusted domain. Between the two of them
they become an open relay. 

-- 
Donovan Baarda [EMAIL PROTECTED]
http://minkirri.apana.org.au/~abo/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: closing exims open relay - something to do with the percenthack

2003-07-02 Thread Shri Shrikumar 
On Wed, 2003-07-02 at 01:42, Donovan Baarda wrote:
 On Wed, 2003-07-02 at 01:09, Shri Shrikumar wrote:
  Hi,
  
  I just did an open relay test on one of my servers and to my surprise
  found that it in an open relay. In particular, it accepts emails to the
  form of
  
  [EMAIL PROTECTED]
  
  where here.com is a local domain within exim.
 
 Check the bug reports on exim. There is a case where a stock standard
 Debian install of exim (and possibly postfix) can turn out to be an open
 relay.
 
 What happens is the the satellite email server blindly forwards email
 to the smart-host, and the smart-host blindly trusts the satellite
 system because it's within the trusted domain. Between the two of them
 they become an open relay. 

There is only one exim installed and its setup as an internet site. It
seems to work fine after changing the percent_hack to the following

percent_hack_domains=

Thanks for your time,


Shri
-- 

Shri Shrikumar   U R Byte Solutions   Tel:   0845 644 4745
I.T. Consultant  Edinburgh, Scotland  Mob:   0773 980 3499
 Web: www.urbyte.com  Email: [EMAIL PROTECTED]


signature.asc
Description: This is a digitally signed message part