On Wed, 2003-07-02 at 01:42, Donovan Baarda wrote: > On Wed, 2003-07-02 at 01:09, Shri Shrikumar wrote: > > Hi, > > > > I just did an open relay test on one of my servers and to my surprise > > found that it in an open relay. In particular, it accepts emails to the > > form of > > > > someone%somewhereelse.com@here.com > > > > where here.com is a local domain within exim. > > Check the bug reports on exim. There is a case where a stock standard > Debian install of exim (and possibly postfix) can turn out to be an open > relay. > > What happens is the the "satellite" email server blindly forwards email > to the smart-host, and the smart-host blindly trusts the satellite > system because it's within the trusted domain. Between the two of them > they become an open relay. There is only one exim installed and its setup as an internet site. It seems to work fine after changing the percent_hack to the following percent_hack_domains="" Thanks for your time, Shri -- ------------------------------------------------------------------------ Shri Shrikumar U R Byte Solutions Tel: 0845 644 4745 I.T. Consultant Edinburgh, Scotland Mob: 0773 980 3499 Web: www.urbyte.com Email: shri@urbyte.com
Attachment:
signature.asc
Description: This is a digitally signed message part