Hi all,
I just got this message in my mail box, it seems an Exim machine I setup
is relaying mail in our local environment ;< It was setup using the
standard Debian 'satellite system' configuration which causes all email to
be rewritten to point at another domain and all outbound mail to be
delivered to a smarthost. (Thus this might be an obscure general problem
in the Debian setup, Hi Mark)
In my setup here the smarthost is a sendmail system (ee.ualberta.ca). What
happens is that Exim is given a message that looks like
relay%uarelay.obtuse.com@???
and rewrites that into
relay%uarelay.obtuse.com@???
And sends it to the sendmail system. The sendmail system is configured to
allow the IP net the Exim box is on to relay mail, so it rewrites the
address again using UUCP conventions to finally deliver it to the relay
checker :<
What gives? If exim was used on nyquist instead of sendmail, or sendmail
used on larcs instead of exim this would not happen, it is only when they
are used together like this that there is a problem!
How can I properly arrange for exim to act like sendmail in processing
these ancient UUCP destinations, or at the very least drop things with %
and ! in them? Should that change be standard for Debian, since this is a
stock configuration?
Thanks,
Jason
-------8<-- Message relayed by ee.ualberta.ca --8<--------
>Received: from nyquist.ee.ualberta.ca(129.128.197.10)
> via SMTP by elvis.ucs.ualberta.ca, id smtpdAAA019G71; Thu May 11 11:46:26 2000
>Received: from larcs.ee.ualberta.ca (mail@??? [129.128.68.118])
> by nyquist.ee.ualberta.ca (8.8.6 (PHNE_17135)/8.8.6) with ESMTP id LAA29733
> for <relay%uarelay.obtuse.com@???>; Thu, 11 May 2000 11:46:26 -0600 (MDT)
>Received: from c4836-001.v-wave.com
> ([24.108.10.93] helo=larcs.ee.ualberta.ca ident=beck)
> by larcs.ee.ualberta.ca with smtp (Exim 3.12 #1 (Debian))
> id 12px2Y-00045s-00
> for <relay%uarelay.obtuse.com@???>; Thu, 11 May 2000 11:46:26 -0600
>To: relay%uarelay.obtuse.com@???
>From: nobody42@???
>Subject: test for susceptibility to third-party mail relay
>Date: Thu, 11 May 2000 17:46:25 GMT
>Message-Id: <rlytest-958067185-25281@???>
>Sender: beck@???
>
>This is a test of third-party mail relay, generated by the
>"rlytest" <URL: http://www.unicom.com/sw/#rlytest> utility.
>
> Target host = larcs.ee.ualberta.ca
> Test performed by <beck@???>
> Using source address of:
> <nobody42@???>
> Using destination address of:
> <relay%uarelay.obtuse.com@???>
>
>
>A well-configured mail server should NOT relay third-party email.
>Otherwise, the server is subject to attack and hijack by Internet
>vandals and spammers.
>
>For information on how to secure a mail server against third-party
>relay, visit <URL: http://maps.vix.com/tsi/>.
