sendmail & localhost rDNS

[Thomas Liske <liske@ibh.de>]

Hi,

last week, there was an article on heise security about MTAs[1] which 
relay mails for hosts having a reverse resolution of 'localhost'. Doing 
a small test shows that sendmail on etch seems to be vulnerable, too. I 
need to have a localhost RELAY line in my access file (which is not 
default AFAIK).

Will there be a DSA on this issue, since it seems to turn Sendmail 
installations with allowed localhost RELAYing into Open Relays?


Cheers,
Thomas


[1] 
http://www.h-online.com/security/Naming-trick-opens-mail-servers--/news/113946

--
support@ibh.de                              Tel. +49 351 477 77 30
www.ibh.de                                  Fax  +49 351 477 77 39

-----------------------------------------------------------------------
Dipl.-Ing. Thomas Liske
Netzwerk- und System-Design


IBH IT-Service GmbH                         Amtsgericht Dresden
Gostritzer Str. 61-63                       HRB 13626
D-01217 Dresden                             GF: Prof. Dr. Thomas Horn
Germany                                     VAT DE182302907
-----------------------------------------------------------------------
Ihr Partner für: LAN, WAN IP-Quality, Security, VoIP, SAN, Backup, USV
-----------------------------------------------------------------------
       professioneller IT-Service - kompetent und zuverlässig
-----------------------------------------------------------------------