my gamera server listed in orbd.org

bisc0tti · Unread post by **bisc0tti** » Tue Feb 08, 2005 5:22 pm

I'm positive my server is not an open relay but ordb.org says that it is. I'm sure it has to do with the following:

http://homepages.tesco.net./~J.deBoyneP ... tests.html

Has anyone else run into this and what have they done to get around this issue? Below is a link to a patch for qmail to deal with RBL testers that give false positives. Scott, is there any way we can get an updated qmail rpm package in the gamera channel?

http://www.qmail.org/qmail-smtpd-relay-reject

Scott MacDonald
Regional Internet Media Inc

Unread post by **scott** » Tue Feb 08, 2005 6:50 pm

I believe you can touch percenthack in the controls dir and get the same effect as that patch.

stephen · Unread post by **stephen** » Fri Feb 11, 2005 12:37 pm

Scott;

Had a few moments wanted to check this for status on the possible open relay.

Is there away to make gamera deny messages using this format "email@somedomain.com"@domainname.com. our sendmail server is accepting the email in this way sadly and passing it on. if gamera would deny mail from being sent this way ..... hrm

Unread post by **scott** » Fri Feb 11, 2005 12:49 pm

Absolutely, the default configuration doesnt allow relaying of any kind, and I believe you can create a q-s rule to catch double @ and throw it away, reject it, or quarantine it.

stephen · Unread post by **stephen** » Fri Feb 11, 2005 3:05 pm

scott;

searching the internet is useless, seems kinda jacked that qmail allows that doesnt it.

Unread post by **scott** » Fri Feb 11, 2005 4:57 pm

qmail as an MTA doesnt, qmail as a smarthost on the other hand works a bit differently. Its just got a blanket rule allowing whatever you specify in the smtproutes field through. It doesnt really have any context on what a valid user is. Kind of one of the reasons Im going over to postfix, you can dictate some basic "email profile" rules (by the domain no less).

That sendmail is relaying it is worrying, I would have thought they'd closed that hole up a decade ago (about the last time I used it in production!).