Yes, there are plenty of HOWTOs available - including a recent PC Quest
article.

As for cc:mail I recommend that you don't use it, or even if you use it,
hide it behind a strong firewall and use a secure smarthost and MX for it.
It is chock full of security holes [1] (as are lotus notes and exchange).

[1] The most common security hole in cc:mail (a favorite with script
kiddies) is to send a mail to the (canonically correct) address
postmaster@[ip.of.ccmail.box] => note the ip is enclosed by square brackets.
This will put the cc:mail box into an infinite loop of bounces, crashing it.

FWIW, this has appeared in Bugtraq, CERT, etc etc over four years ago, not
some brand new exploit.  So, I will regretfully be compelled to direct all
flames re this to the recycle bin (yeah, my office forces me to use Outlook,
why do you ask?) :(

Suresh Ramasubramanian | [EMAIL PROTECTED]


> -----Original Message-----
> From: Sumith Ail [SMTP:[EMAIL PROTECTED]]
> Sent: Saturday, April 01, 2000 12:23 PM
> To:   [EMAIL PROTECTED]
> Subject:      [LIH] Email Server
> 
> Hi Friends
> 
> Is there any help available on setting up a local SMTP/POP3 Mail 
> server from scratch on the Internet or from U all using either sendmail 
> or qmail
> 
> Can Linux mail server be configured as a Internet gateway to CCMAIL
> 
> 

-----------------------------------------------------------------------
The LIH mailing list archives are available at:
http://lists.linux-india.org/cgi-bin/wilma/linux-india-help

Reply via email to