On Thu, Feb 01, 2001 at 02:46:22PM -0500, Chris McCoy wrote:
> I provide free hosting and have a large amount of users everyday. I only
> have relaying from 127.0.0.1 because of I send an email out for
> verification from my php signup script. I have this one issue. Someone was
> trying to send 1000's of emails from a script on the web making the
> machine thinking its 127.0.0.1 localhost. the only reason i have the
> 127.0.0.1 for relay is because of sending out that email for
> verification. other than that i dont need relay. how can i fix this
> problem so people cant send mail from our server on our web page? any help
> is greatful. (this is a freebsd machine) thanks.
Why not change your php script to submit the email via the
qmail-inject command rather than SMTP? Then you can turn off you
127.0.0.1 listener.
It's obscurity, but another alternative is put your listener on
127.0.0.2 and create an alias on your loopback interface.
Regards.
