Re: [Exim] Spam test, open relay whatever it was

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Sean Rima
Date:  
À: exim-users
Sujet: Re: [Exim] Spam test, open relay whatever it was
On Tue, 19 Feb 2002, Lee Maguire verbalised:

>> I run exisumm every night and noticed this entry:
>>
>>     1 relaytest%rr.njabl.org@???: unknown local-part
>>           "relaytest%rr.njabl.org" in domain "tcob1.net"

>>
>> I then checked the log and noticed that Exim sent a bounce message
>> back, I can only guess it was for unknown user. If there anyway to
>> tell exim to notice this as a relay attempt and not as an unknown
>> user.
>
> Unless you're using percenthack, then it is an unknown user.
> If you need to specificly mark these, then you could try
> something like this at the top of your directors:
>
>   reject_percenthack_relay:
>     driver = smartuser
>     condition = "${if match{$local_part}{.*%.*}{yes}}"
>     new_address = :fail: rejected percent-hack relay attempt

>
> setting "receiver_verify = true" should reject these at transaction
> time, even if you deliver "any local part"@domain.
>


Thanks, Lee, I has saved for for futher reference.

Sean
- --
BBS and Fidonet News Portal at http://www.tcob1.net
Offering feeds for Fidonet, Adventurenet, and many other nets
ICQ: 679813 TCOB1 BBS: 095 43852 Jabber: tcobone@???