From owner-freebsd-security Fri Jun 21 21:56: 4 2002 Delivered-To: freebsd-security@freebsd.org Received: from web10106.mail.yahoo.com (web10106.mail.yahoo.com [216.136.130.56]) by hub.freebsd.org (Postfix) with SMTP id 3B22F37B401 for ; Fri, 21 Jun 2002 21:55:59 -0700 (PDT) Message-ID: <20020622045559.41921.qmail@web10106.mail.yahoo.com> Received: from [68.5.49.41] by web10106.mail.yahoo.com via HTTP; Fri, 21 Jun 2002 21:55:59 PDT Date: Fri, 21 Jun 2002 21:55:59 -0700 (PDT) From: twig les Subject: Re: Possible security liability: Filling disks with junk or spam To: Darren Pilgrim , "Kevin Kinsey, DaleCo, S.P." Cc: Mark Hartley , twig les , security@FreeBSD.ORG In-Reply-To: <3D13FFB2.39A80570@pantherdragon.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org When I asked if it would break something to forward those accounts' mail to /dev/null instead of root, I meant: do those psuedo-users actually send anything via mail or everything via syslog? Excuse the strange question, I'm a psuedo-admin (aka user). --- Darren Pilgrim wrote: > "Kevin Kinsey, DaleCo, S.P." wrote: > > > > Better yet, comment out the lines in /etc/aliases, > > which will cause the mail to be returned > > since that user won't exist. > > > > Why increase the spam traffic by the use > > of the bitbucket? If the mail doesn't come > > back they just keep sending...... > > Without the aliases(5) entries, the mail will be > delivered to local > mailboxes for those pesudo-users, eventually filling > the disk if you > don't monitor disk usage. This was precisely the > problem for Brett's > client. IMO the proper way to handle this is to use > an MTA that has > some kind of access-control mechanism to restrict > mail delivery to > non-user accounts in addition to having a forwarding > mechanism for > them. ===== ----------------------------------------------------------- Only fools have all the answers. ----------------------------------------------------------- __________________________________________________ Do You Yahoo!? Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message