Re: aliases issue !!!

[Mike Jackson]

David Young wrote:
 
 Could he do something like use a .qmail file to pipe the message into a
 script that would examine headers and then only deliver if the message was
 from the local domain? I guess that the headers could be forged easily
 enough to get around this, but at least if could be a plausible attempt.


Sure, it might reduce the number of unwanted messages, but there is no
guarantee it will stop everything. It's not much more difficult to set
up ezmlm and do it the right way. Aliases are low tech and should not be
used for more than 2-3 recipients, imho. ;-)

Mike

aliases issue !!!

[nissim_p]

Hello all ,

I still didn't get an answer for my 
question about aliases defined in /etc/aliases regarding their vulnrabilty to 
outside world .

I am not intersted in letting people use 
certain aliases in /etc/aliases from the outside and maby even restrict the 
access to these aliases to certain users only .

How can I do  cause now everyone 
can use these aliases like [EMAIL PROTECTED] 
which is a spam hole .

Thanks , 
Nissim .

Re: aliases issue !!!

[Mike Jackson]

 [EMAIL PROTECTED] wrote:
 
 Hello all ,
 
 I still didn't get an answer for my question about aliases defined in
 /etc/aliases regarding their vulnrabilty to outside world .
 
 I am not intersted in letting people use certain aliases in
 /etc/aliases from the outside and maby even restrict the access to
 these aliases to certain users only .

 How can I do cause now  everyone can use these aliases like
 [EMAIL PROTECTED] which is a spam hole .
 
 Thanks ,
 Nissim .

You can't restrict who can use aliases. Anyone who can send mail to your
system can send mail to all aliases that exist on the system. If you
convert the aliases to Ezmlm lists, you can restrict posting to
subscribers and even moderate lists.

Mike

Re: aliases issue !!!

[David Young]

Could he do something like use a .qmail file to pipe the message into a
script that would examine headers and then only deliver if the message was
from the local domain? I guess that the headers could be forged easily
enough to get around this, but at least if could be a plausible attempt.

 From: Mike Jackson [EMAIL PROTECTED]
 Date: Sat, 21 Apr 2001 22:01:10 +0300
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: aliases issue !!!
 
 You can't restrict who can use aliases. Anyone who can send mail to your
 system can send mail to all aliases that exist on the system. If you
 convert the aliases to Ezmlm lists, you can restrict posting to
 subscribers and even moderate lists.
 
 Mike