From owner-freebsd-security Tue Jan 22 9:20:52 2002 Delivered-To: freebsd-security@freebsd.org Received: from mail.sial.org (sense-sea-MegaSub-1-583.oz.net [216.39.146.75]) by hub.freebsd.org (Postfix) with ESMTP id E12F637B41C for ; Tue, 22 Jan 2002 09:20:40 -0800 (PST) Received: from darkness.sial.org (localhost [IPv6:::1]) by mail.sial.org (8.12.2/8.12.2) with ESMTP id g0MHKccF077745 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Tue, 22 Jan 2002 09:20:38 -0800 (PST) Received: (from jmates@localhost) by darkness.sial.org (8.12.2/8.12.2/Submit) id g0MHKb29077744 for freebsd-security@freebsd.org; Tue, 22 Jan 2002 09:20:37 -0800 (PST) Date: Tue, 22 Jan 2002 09:20:37 -0800 From: "Jeremy A. Mates" To: freebsd-security@freebsd.org Subject: Re: relaying mail from DHCP clients Message-ID: <20020122172037.GA77721@darkness.sial.org> Mail-Followup-To: "Jeremy A. Mates" , freebsd-security@freebsd.org References: <20020122101115.P25912-100000@camelia.dnt.ro> <002701c1a328$9aac7fa0$2e020a0a@mti.itb.ac.id> <20020122112913.N58243@heresy.dreamflow.nl> <20020122111816.5e70b6ff.resopmok@gramsc1.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20020122111816.5e70b6ff.resopmok@gramsc1.dyndns.org> User-Agent: Mutt/1.3.25i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org * Chris Thomas [2002-01-22 08:19-0800]: > it is wise to only allow clients from inside your LAN to relay mail, > preventing your server from being used as a relay by spammers (note > that you can specify an IP range in /etc/mail/access). open mail > relays are a problem, and they can get you blacklisted fairly easily > (www.ordb.org). pop3 authentication is a viable solution, but can be > somewhat difficult to ipmlement with sendmail. Or, you can use SMTP AUTH (and/or STARTTLS) if pop-before-smtp does not appeal to you: http://www.sial.org/talks/smtpauth-starttls/ -- Jeremy Mates http://www.sial.org/ OpenPGP: 0x11C3D628 (4357 1D47 FF78 24BB 0FBF 7AA8 A846 9F86 11C3 D628) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message