Board index Mail

local domain based messages not subject to AUTH when targeting other local addresses

local domain based messages not subject to AUTH when targeting other local addresses

Post by Ju J » Mon, 27 May 2002 15:27:11



Howdy,

If ABC.COM is my SendMail domain, can somebody please consider the following
examples to help me understand why I'm having this fairly simple
inconsistency in behaviour?

MESSAGE 1


is subject to SASL AUTH due to nothing being specified in relay-domains and
access.db. All works just as configured.

MESSAGE 2


is NOT subject to any SASL AUTH and is delivered locally to abc.com without
ANY checks whatsoever.

I want ALL messages with a source address based on ABC.COM to be subject to
SASL AUTH at ALL times even if the target is ABC.COM as well. Otherwise,
given there is no restriction on who connects to my SMTP as specified in my
access.db (as per my configuration), somebody could simply spam all my users
as much as they like from any existing or made-up local ABS.COM address as
there is no AUTH required.

Furthermore as mentioned there at the end, where the user can use <made-up

username even when message is subject to AUTH. Although I'm aware that the
bogus name wouldn't match their AUTH login details, users really should be
prevented from doing this anyway.

I would appreciate any help. Thanks in advance.

 
 
 
Top

1. mail going to local accounts on some domains and not others.

I have approx 9 domains hosted on a RH 6.2 server and I'm having e-mail
weirdness with the forms.  I had configured it with linuxconf and I read on the
sendmail site that linuxconf screws up the configs.  So I removed the package,
downloaded the current 8.11 set and installed.

Here's the problem.

If I mail to my home isp, it works fine.  If I mail to any of my hosted sites,
it doesn't.  My hosted sites receive mail at another server and the MX records
indicate such.  I can mail to them just fine from anywhere except the RH 6.2
box.  It attempts to send it to a local user account, and if it doesn't exist it
generates an error.

I have cleaned out all of the old send mail files I can find, and as far as I
know sendmail has no way of knowing that these domains are hosted locally.  I
don't even have them in /etc/hosts.  Yet if I try and send mail to someone at
any of them, instead of going out over the net to their actual mail server it
tries to deliver it locally.

Any ideas?

Thanks

Patrick

2. Hotmail Changes - Attachments

3. How do I make Sendmail use AUTH for local domain messages / intra e-mail

4. atlstr.h bug?

5. Help: Redirecting address%domain@domain addresses to a local mailbox

6. How to call a variable Method?

7. Local sender's "Domain of sender address does not resolve"

8. Your opinions about software piracy

9. Local Delivery problem with 8.12.0Beta19 domain of sender address , does not resolve

10. Local domain for local use only (server connected to the internet).

11. Allow local domain only from local networks

12. From: and Reply-To: modified by sendmail for local domain not for remote domains?

13. Local config error. Hostname not recognized as local


All times are UTC
Board index