Re: Sendmail question

From: Suporte Matik (asstec_at_matik.com.br)
Date: 02/14/05

  • Next message: Bill Vermillion: "Re: Sendmail question" 
    To: freebsd-isp@freebsd.org
Date: Sun, 13 Feb 2005 23:13:29 -0200

    On Sunday 13 February 2005 22:46, Noah Davidson wrote:
    > The only problem with that approach is that this is a back up server and
    > the users may not be able to know of all of the users. Is there any way to
    > not have all of these bounced mail go to the postmaster / root account.
    >

    sendmail should reject mail for nonexistent users by default and not forward
    to root unless you have any strange alias for all but you say bounced mail
    what confuses me a little bit, but anyway, isn't it that your systema
    accounts are exploited by the spammers ? so if having 10 domains you may get
    10 spams for tty in your root mailbox, to prevent you may try this in your
    access:

    tty@ ERROR:"4.2.2:450 No such user here."

    and so on for each systema account and rebuild the access.db and probably your
    headache goes away

    Hans

    > Thanks
    > Noah
    >
    > ________________________________
    >
    > From: Bill Vermillion [mailto:bv@wjv.com]
    > Sent: Sun 2/13/2005 2:30 PM
    > To: Noah Davidson
    > Cc: FreeBSD-ISP List
    > Subject: Re: Sendmail question
    >
    >
    >
    > Ashes to ashes, and DOS to DOS Noah Davidson was heard to say
    >
    > on or about Sun, Feb 13, 2005 at 14:10 :
    > > I have set up a new FreeBSD box as mainly a backup mail server,
    > > although it is primary for a couple of domains. It is running
    > > sendmail 8.13.3 and it works fine, except for all the spam that
    > > is being sent to it to bad email addresses. I have aliased
    > > the root account to an email group on another server so that
    > > someone reads the root mail. The problem is that all the mail
    > > that spammers are sending to address that do not exist get
    > > bounced and the root account a notification (I believe it
    > > is the postmaster alias which is aliased to root). Is there
    > > any way to not have these notifications sent out. They are
    > > filling up the mail boxes. I just want the return to sender, but
    > > not to the root / postmaster as well. I have tried using the
    > > confCOPY_ERRORS_TO in my .mc file, but that just sends it to an
    > > additional account as well.
    >
    > Making assumptions that your sendmail is receiving bogus mail
    > for accounts that you have sendmail receive here is approach you
    > can take.
    >
    > Assume you have domains a.com b.com and c.com and your
    > local-host-names has those.
    >
    > Then you need to find out what users you have for each domain
    >
    > If you have curly larry and moe on a.com and no one else, then you
    > can build a virtualusrtable that looks like this.
    >
    > curly@a.com curly
    > larry@a.com larry
    > moe@a.com moe
    > @a.com nouser
    >
    > And the accnount 'nouser' will be in your /etc/mail/aliases
    > file and will look like this:
    >
    > nouser: /dev/null
    >
    > Run make in /etc/mail to create virtusertable.db and aliases.db
    > and that should get rid of the bogus names going to root.
    >
    > I find the virtualusertable to be quite handy for elminating a lot
    > of junk. It will only be a problem if you have a large user
    > base or lots of domains.
    >
    > Bill
    > --
    > Bill Vermillion - bv @ wjv . com
    >
    >
    > _______________________________________________
    > freebsd-isp@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" 

    -- 
Infomatik
 implementamos asas na sua rede.
  (18)3551.3591 (18)8112.7007
_______________________________________________________
Participe na lista de segurança, 
recebendo as mais importantes notícias na hora
Entre em http://info.matik.com.br e participe.
_______________________________________________________
Mensagens sem assinatura GPG não são nossas.
Messages without GPG signature are not from us.
_______________________________________________________

  • Next message: Bill Vermillion: "Re: Sendmail question"

    Relevant Pages

    • Re: Subject: access denied to images (again)
      ... The site collection has the Office SharePoint Server Publishing Infrastructure feature activated. ... Does the issue only occurr on one root site or occurred on all root ... Perhaps this sites child sites should all load the quick launch page rather than the Navigation page? ... site with admin account and then try to view the site on the server? ...
      (microsoft.public.sharepoint.portalserver)
    • Re: NFS4 authentification / fsuid
      ... account can mount an export (let's say this ... will the NFSserver process run with an fsuid equal to ... kerberos saves the TGT in a file on /tmp, so root can still ... suid and grab your cred (and the same goes for CIFS). ...
      (Linux-Kernel)
    • Re: Sendmail question
      ... > server and the users may not be able to know of all of the ... > to the postmaster / root account. ... If you have a stock /etc/mail/aliases file the postmaster account ...
      (freebsd-isp)
    • Re: Allow ONLY "Administrator" and "System" groups full control to
      ... This includes account that you might want for services, ... than these two groups would need ANY access (even read permissions) to the ... Leave the root permissions alone and apply your NTFS ... I'm setting up a new Server 2003-R2 server. ...
      (microsoft.public.windows.server.security)
    • Re: user privledges
      ... > redhat 7.2 i created a user account for myself to use on a daily basis. ... > fare i have just been su - and entering the root pass. ... it started but would not install because i did ... sofware to /opt/musicmatch as a normal user. ...
      (comp.security.unix)