[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ZMailer relaying policy

On Thu, Mar 30, 2000 at 10:04:54AM +0300, Vladimir Lazarenko wrote:
> Hi!
> Today I've encountered the following problem, which I don't know how to solve.
> I need to close the relaying of the following masks:

	Depending on how old a version you are running, some can
	block the things you refer to, others may fail by letting
	things thru.

> 1) MAIL FROM:<spambag@fake.domain> 
> RCPT TO:<victim%target@{relay}>  

	SMTPserver configuration must have these two in this order,
	or delete both entries.  More recent servers throw this PARAM
	away alltogether.

#PARAM  accept-percent-kludge # "localpart" can contain '%' and '!'
PARAM   reject-percent-kludge # "localpart" can't contain  --"--

	And of course the policy control must work.

> 2)MAIL FROM:<spambag@fake.domain> 
> RCPT TO:<victim@target@{relay}>  

	RFC 821 scanner bombs on this

> 3)MAIL FROM:<spambag@fake.domain> 
> RCPT TO:<target!victim@{relay}>  

	Alike 1).

> 4)MAIL FROM:<spambag@fake.domain> 
> RCPT TO:<@{relay}:victim@target>  

	Just basic policy control is needed

> 5) MAIL FROM:<fake.domain!spambag> 
> RCPT TO:<target!victim>  

	RFC 821 scanner bombs on this

> and I couldn't find in the documentation how cam I change the policy to deny
> THIS kind of relaying.

	See  README.SPAM  at the toplevel source directory for
	the deeper pointers.  It should be quite simple, unless
	you decide to hack it your own way..

	The  2.99.53-pre1 snapshot earlier this week contains
	also interactive methods for testing smtpserver's policy
	routines in deeper detail.

> ORBS is digging our service every day, so I really need a help, which I'll
> greately appreciate.
> Looking forward to hearing from you.
> --
> Sincerely Yours, Vladimir Lazarenko.
> CIT "Vostok" IT Manager
> nic-hdl: VL824-RIPE
> http://www.vostok.net
> +380(572)-210901

/Matti Aarnio	<mea@nic.funet.fi>