From: Ralf Hildebrandt (no email)
Date: Fri Apr 25 2008 - 08:39:38 EDT
* Zbigniew Szalbot <>:
> I am writing with the hope that some of you are using
> postfix-to-mailman.py utility and would like to share how you have solved
> the problem of possible backscatter. I have installed mailman a couple of
> days ago and I am using postfix-tomailman.py script (I followed
> instructions from http://www.purplehat.org/?page_id=18).
>
> When doing tests, I have noticed that with such setup, if I fake email
> address and send to a non-existent address at lists.domain.tld, then
> instead of rejecting postfix will bounce the mail. I believe this opens
> door for backscatter. Has anyone implemented this script and took
> measures to prevent such backscatter? If so, could you share how? If not,
> I guess I will go the usuall route of generating necessary mailman
> aliases. The advantage of the postfix-to-mailman.py script is that the
> aliases are handled automatically (no need to generate them).
relay_domains = proxy:mysql:/usr/local/etc/postfix/mysql_relay_domains_maps.cf
lacks a corresponding
relay_recipient_maps entry in main.cf which lists VALID addresses that
may be relayed to mailman
-- Ralf Hildebrandt () Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de Ballmer should step down in favour of Mr T, because he pity the fool who don't got high-end video cards and 4GB RAM for Vista Aero!
|
|
|