Re: [Exim] % hack relay test failed - Exim-3.36 bug?

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Odhiambo Washington
Date:  
À: Phil Pennock
CC: Exim Users
Sujet: Re: [Exim] % hack relay test failed - Exim-3.36 bug?
* Phil Pennock <Phil.Pennock@???> [20020502 08:53]: wrote:
> On 2002-05-02 at 08:36 +0300, Odhiambo G. Washington wrote:
> > I encountered a situation today with my 3.36 setup that I'd like to seek
> > your views on.
> >
> > I have percent_hack_domains commented out but my server seems to allow
> > relay for addresses using that, as seen from the test below:
>
> The "test" does not provide evidence to support this claim.



This is absolutely true.

> > :Relay test: #Test 8
> > >>> mail from: <spamtest@???>
> > <<< 250 <spamtest@???> is syntactically correct
> > >>> rcpt to: <nobody%mail-abuse.org@???>
> > <<< 250 <nobody%mail-abuse.org@???> is syntactically correct
>
> > Something I'm missing, maybe??
>
> Yes.
>
> "nobody%mail-abuse.org" is perfectly valid syntax for the LHS of an
> email address. Just because it's accepted, that does *not* mean that
> the MTA will then re-route the mail to "mail-abuse.org".



I agree.

> In this case, it means that you either have a Director which accepts
> mail with a LHS of "nobody%mail-abuse.org" or the relevant machine has
> ns2.wananchi.com as a relay_domain or somesuch.
>
> Eg, "*: default_mailbox"



The second observation is true. ns2.wananchi.com is actually the fqdn
and is accepted as local.

> Actually, it's not quite that simple, because you're getting
> "syntactically correct" instead of "verified", but that's not relevant.



Again I agree.

> The problem here is assuming that just because an MTA will accept mail
> for an address which is perfectly valid syntax, that it will ascribe
> some particular set of semantics to that address, when those semantics
> are not mandated by any standard.


You are very right. I do apologise to the Exim community for the use
of the word 'bug', because after your mail I did a full test and got
the result below.

My worry would then be what would happen if someone from out there did
the same. What does your test reveal?




wash@ns2 ('tty') ~ 74 -> telnet 0 25
Trying 0.0.0.0...
Connected to 0.
Escape character is '^]'.
220 ns2.wananchi.com ESMTP Exim 3.36 #1 Thu, 02 May 2002 09:13:51 +0300
ehlo FreeBSD
250-ns2.wananchi.com Hello ns2.wananchi.com [62.8.64.4]
250-SIZE 52428800
250-ETRN
250-PIPELINING
250 HELP
mail from: spamtest@???
250 <spamtest@???> is syntactically correct
rcpt to: nobody%mail-abuse.org@???
250 <nobody%mail-abuse.org@???> is syntactically correct
data
354 Enter message, ending with "." on a line by itself
This is a test
.
550-A message for from spamtest@??? was rejected from host ns2.wananchi.com (FreeBSD) [62.8.64.4] because
550-spamtest@???
550-is NOT a valid return address.
550-If you are not a spammer call "postmaster contact" at (254)2 313 985
550 rejected: unknown local part in sender <spamtest@???>





-Wash

--
Odhiambo Washington  <wash@???>    "The box said 'Requires
Wananchi Online Ltd.  www.wananchi.com      Windows 95, NT, or better,'
Tel: 254 2 313985-9   Fax: 254 2 313922     so I installed FreeBSD."
GSM: 254 72 743 223   GSM: 254 733 744 121  This sig is McQ!  :-)



In case of atomic attack, the federal ruling against prayer in schools
will be temporarily canceled.