Date: Sat, 27 Apr 2013 18:13:55 +0100 From: Matthew Seaman <matthew@FreeBSD.org> To: freebsd-questions@freebsd.org Subject: Re: Sendmail 8.14.5/8.14.5 on fbsd-9.1R (EC2) Message-ID: <517C0753.2010506@FreeBSD.org> In-Reply-To: <alpine.BSF.2.00.1304271240410.26949@fledge.watson.org> References: <20130426153728.M27769@ezo.net> <517B8ED2.3060103@infracaninophile.co.uk> <alpine.BSF.2.00.1304271240410.26949@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 27/04/2013 17:43, doug wrote: >>> DAEMON_OPTIONS(`Port=587, Addr= 111.222.333.444, Name=MSA, M=E') > If sendmail is listening on port 587, it will relay for any valid sender > who can reach that port. You see where it says 'M=E' in that DAEMON_OPTIONS line? That should probably be changed to 'M=Ea' meaning 'require authentication'. That's usually the right thing to do for a message submission agent, and the use of authentication will allow senders to relay through the daemon without the usual anti-relaying checks. Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlF8B1oACgkQ8Mjk52CukIwkJwCcCv6fmVBXMjXPHD2dzHXbFtce PEcAn1bzk6XjTqhMEpRCJpgKXjv06CVi =9JGG -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?517C0753.2010506>