Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 Jun 2002 21:55:59 -0700 (PDT)
From:      twig les <twigles@yahoo.com>
To:        Darren Pilgrim <dmp@pantherdragon.org>, "Kevin Kinsey, DaleCo, S.P." <kdk@daleco.biz>
Cc:        Mark Hartley <mark@work.drapple.com>, twig les <twigles@yahoo.com>, security@FreeBSD.ORG
Subject:   Re: Possible security liability: Filling disks with junk or spam
Message-ID:  <20020622045559.41921.qmail@web10106.mail.yahoo.com>
In-Reply-To: <3D13FFB2.39A80570@pantherdragon.org>

next in thread | previous in thread | raw e-mail | index | archive | help
When I asked if it would break something to forward
those accounts' mail to /dev/null instead of root, I
meant: do those psuedo-users actually send anything
via mail or everything via syslog?  Excuse the strange
question, I'm a psuedo-admin (aka user).


--- Darren Pilgrim <dmp@pantherdragon.org> wrote:
> "Kevin Kinsey, DaleCo, S.P." wrote:
> > 
> > Better yet, comment out the lines in /etc/aliases,
> > which will cause the mail to be returned
> > since that user won't exist.
> > 
> > Why increase the spam traffic by the use
> > of the bitbucket?  If the mail doesn't come
> > back they just keep sending......
> 
> Without the aliases(5) entries, the mail will be
> delivered to local
> mailboxes for those pesudo-users, eventually filling
> the disk if you
> don't monitor disk usage.  This was precisely the
> problem for Brett's
> client.  IMO the proper way to handle this is to use
> an MTA that has
> some kind of access-control mechanism to restrict
> mail delivery to
> non-user accounts in addition to having a forwarding
> mechanism for
> them.


=====
-----------------------------------------------------------
Only fools have all the answers.
-----------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020622045559.41921.qmail>