Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Aug 1998 08:34:05 -0700 (PDT)
From:      David Wolfskill <dhw@whistle.com>
To:        bh@synergy.transbay.net, frankg@idfw.com
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Security
Message-ID:  <199808041534.IAA08350@pau-amma.whistle.com>
In-Reply-To: <Pine.BSF.3.96.980803162740.26879A-100000@synergy.transbay.net>

next in thread | previous in thread | raw e-mail | index | archive | help
>Date: Mon, 3 Aug 1998 16:31:21 -0700 (PDT)
>From: Brandon Huey <bh@synergy.transbay.net>

>fortunately, that's not the moral for the fine members of this list.

>2.2.6 uses 8.8.8, so relaying is not disabled by default.
>upgrade to 8.9.1, it has extended anti-spam functionality.

>On Mon, 3 Aug 1998, Frank Griffith wrote:

>> If someone came in, unathorized that is, and used 
>> my mail server to send mail, which log file would show me 
>> this intrusion?  How can I prevent this from happening again?

Also, sendmail (certainly as of 8.8.8; I haven't set up 8.9.x yet) can
be compiled with tcp_wrappers support, which allows you to use the same
sort of controls tcp_wrappers supplies for access to your SMTP server.

I've done this at home, and find it useful.  Among other things, I can
disallow known spam sites from connecting to my SMTP server at all....

The same could hold true for other forms of abuse.

I don't recall if the support in question involves logging the attemps;
if it does, the log would be something such as /var/log/tcpd.

(As someone else pointed out /var/log/maillog* would be where to see the
logs of the mail transiting your system.  That's a somewhat different
issue.)

david
-- 
David Wolfskill		UNIX System Administrator
dhw@whistle.com		voice: (650) 577-7158	pager: (650) 371-4621

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808041534.IAA08350>