Date: Thu, 7 Dec 2000 18:39:24 -0600 From: "Scot W. Hetzel" <hetzels@westbend.net> To: "Dave Tweten" <tweten@nas.nasa.gov> Cc: "Lauri Laupmaa" <mauri@inspiral.net>, <stable@FreeBSD.ORG> Subject: Re: sendmail, rbl & orbs Message-ID: <002d01c060af$544c3e40$8dfee0d1@westbend.net> References: <200012072111.eB7LBVb34297@gilmore.nas.nasa.gov>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
From: "Dave Tweten" <tweten@nas.nasa.gov>
> hetzels@westbend.net said:
> >NOTE: orbsbl2 - Hack to limit the scope of rejected open-relays from
> >the ORBS and RBL relays lists.
>
> Okay. So where would one go to get this hack, since it doesn't seem to
appear
> in /usr/src/contrib/sendmail/cf/hack as a result of a STABLE cvsup of
src-all.
I created this hack, so you would need to obtain the file from me.
Attached is the orbsbl2.m4 file.
To use orbsbl2.m4:
1. Save the file to /usr/src/contrib/sendmail/cf/hack and/or
/usr/share/sendmail/cf/hack
2. add orbsbl2 to your sendmail.mc file, before the DNS BlackList you wish
to restrict.
HACK(orbsbl2)
or
HACK(orbsbl2, `/etc/mail/openrelay')
NOTE: By default it uses /etc/mail/open-relays for a list of IP
addresses to look up in the dnsbl lists.
3. add IP addresses to check in the /etc/mail/open-relays. The list can
contain the IP address of a open relay, or the first 3 numbers to check the
entire class C for open relays.
62.157.114.202
62.160.146
Scot
[-- Attachment #2 --]
divert(-1)
#
# Copyright (c) 1998, 1999 Sendmail, Inc. and its suppliers.
# All rights reserved.
#
# By using this file, you agree to the terms and conditions set
# forth in the LICENSE file which can be found at the top level of
# the sendmail distribution.
#
#
divert(0)
ifdef(`_DNSBL_R_',`dnl',`dnl
VERSIONID(`$Id: orbsbl.m4,v 8.18 1999/08/03 04:30:56 swh Exp $')')
divert(-1)
define(`_DNSBL_OPENRELAY_', `ifelse(len(X`'_ARG_),`1',MAIL_SETTINGS_DIR`open-relays',_ARG_)')dnl
divert(8)
# Selective IP Address Check
R$* $: $&{client_addr}
R$+ $: <@> $1 mark it
R<@> $={openrelays} $: $1 match? remove mark
R<@> $-.$-.$-.$- $: <@> $1.$2.$3 check netblock
R<@> $={openrelays} $: $1 match netblock? remove mark
R<@> $+ $@ OK otherwise: ok
divert(-1)
LOCAL_CONFIG
# List of Open Relays by IP address or netblock
F{openrelays} _DNSBL_OPENRELAY_
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002d01c060af$544c3e40$8dfee0d1>