[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: closing exims open relay - something to do with the percent hack



On Wed, 2003-07-02 at 01:42, Donovan Baarda wrote:
> On Wed, 2003-07-02 at 01:09, Shri Shrikumar wrote:
> > Hi,
> > 
> > I just did an open relay test on one of my servers and to my surprise
> > found that it in an open relay. In particular, it accepts emails to the
> > form of
> > 
> > someone%somewhereelse.com@here.com
> > 
> > where here.com is a local domain within exim.
> 
> Check the bug reports on exim. There is a case where a stock standard
> Debian install of exim (and possibly postfix) can turn out to be an open
> relay.
> 
> What happens is the the "satellite" email server blindly forwards email
> to the smart-host, and the smart-host blindly trusts the satellite
> system because it's within the trusted domain. Between the two of them
> they become an open relay. 

There is only one exim installed and its setup as an internet site. It
seems to work fine after changing the percent_hack to the following

percent_hack_domains=""

Thanks for your time,


Shri
-- 
------------------------------------------------------------------------
Shri Shrikumar       U R Byte Solutions           Tel:   0845 644 4745
I.T. Consultant	     Edinburgh, Scotland          Mob:   0773 980 3499
                     Web: www.urbyte.com          Email: shri@urbyte.com

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: