Re: security hole -- anynomous user can send email from my postfix

From: mouss (no email)
Date: Wed Apr 04 2007 - 17:25:02 EDT

  • Next message: mouss: "Re: How can I enforce propper headers"

    JOYDEEP wrote:
    > Charles Marcus wrote:
    >
    >>>>> I have done smtpd_recipient_restrictions = reject_unlisted_sender
    >>>>>
    >>>>> and now I can't send mail even as a valid user. have I done anything
    >>>>> wrong here ?
    >>>>> please suggest.
    >>>>>
    >>>> Logs? postconf -n (to prove you made the changes)?
    >>>>
    >>> here is postconf -n
    >>>
    >> Ok - but what about logs? When troubleshooting this kind of thing, you
    >> should always provide the logs of an attempt to do whatever is failing
    >> - this will usually tell you what is wrong, or at least point you in
    >> the right direction.
    >>
    >>
    > log reports
    > ---------------------------------
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: dict_ldap_get_values[1]:
    > Search found 0 match(es)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: dict_ldap_get_values[1]:
    > Leaving dict_ldap_get_values
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: dict_ldap_lookup: Search
    > returned nothing
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: maps_find:
    > virtual_alias_maps: @kolkatainfoservices.in: not found
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: mail_addr_find:
    > -> (not found)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr request = lookup
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr table =
    > unix:passwd.byname
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr flags = 64
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr key =
    >
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: status
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: status
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute value: 1
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: value
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: value
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute value: (end)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: (list terminator)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: (end)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: dict_proxy_lookup:
    > table=unix:passwd.byname flags=0100 key= ->
    > status=1 result=
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: maps_find:
    > local_recipient_maps: : not found
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr request = lookup
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr table =
    > unix:passwd.byname
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr flags = 64
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: send attr key = aftab
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: status
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: status
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute value: 1
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: value
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: value
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute value: (end)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: private/proxymap socket:
    > wanted attribute: (list terminator)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: input attribute name: (end)
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: dict_proxy_lookup:
    > table=unix:passwd.byname flags=0100 key=aftab -> status=1 result=
    > Apr 3 13:34:32 linux postfix/smtpd[8498]: maps_find:
    > local_recipient_maps: aftab: not found
    >

    so user isn't found in local_recipient_maps. is "aftab" in your
    /etc/passwd?


  • Next message: mouss: "Re: How can I enforce propper headers"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD