Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 Jul 2002 00:45:47 -0400 (EDT)
From:      Jason Hunt <leth@primus.ca>
To:        freebsd-questions@FreeBSD.ORG
Cc:        Mike <root@unixhideout.com>
Subject:   Re: Allowing controlled relay with sendmail.
Message-ID:  <20020730003608.V8148-100000@lethargic.dyndns.org>
In-Reply-To: <3230.192.168.1.10.1027986071.squirrel@email.unixhideout.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> >Keep in mind that by opening up your mail server to let users from other
> >ISPs relay through you, you are becoming an open relay yourself.
>
> How am i an open relay if i am requiring auth before sending?

If you're requiring SMTP AUTH, then no, you're not an open relay.  I meant
that if you were to just add IP ranges for all of your users which are on
numerous ISPs, then effectively you are becoming an open relay for the
said ISPs.

As a side note, sendmail also allows you to define domains to relay.  This
is determined by doing a reverse lookup on the IP of the client.  However,
I'm not sure how the rules go for resolving forwards, or if the forwards
and reverses are different domains, etc etc.  Either way, if you had
people on isp1.com and isp2.com that you want to relay for, you can
just add "isp1.com RELAY" and "isp2.com RELAY" to the access list.  Even
when doing this, you should also add the range of IPs, in-case DNS stops
working.


> This is just sad. The internet used to be such a nice place. Then the
> pinheads arrived. Im so limited to what i can do with my site/servers
> because of people with no respect for other people's property. What ever
> happened to if it's not yours dont touch it? =]

*sigh* Marketting?  Business?  All that cal.  Yeah, too bad it wasn't 1995
again.  If it was, I'd still be on the BBSes.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020730003608.V8148-100000>