Re: configuring postfix to reject messages to non-existing user account

2004-02-07 Thread Craig Sanders
On Sat, Feb 07, 2004 at 04:38:58PM +, Shri Shrikumar wrote: > I have a postfix installation and it accepts all email to specified domains > regardless of the user part. This seems to pose a security hole in sending > spam / viruses. > > Say someone sends an email to the server with the from of

Re: How do you manage Perl modules?

2004-02-07 Thread Craig Sanders
On Fri, Feb 06, 2004 at 05:41:18PM -0500, Kris Deugau wrote: > However, I've just discovered that there's also a bad version mismatch > between the "default" libdb version used by DB_File in RedHat, and the one in > Debian (db3 in RedHat vs db1 [I think] in Debian). I also discovered that > this h

Re: configuring postfix to reject messages to non-existing user account

2004-02-07 Thread Craig Sanders
On Sat, Feb 07, 2004 at 04:38:58PM +, Shri Shrikumar wrote: > I have a postfix installation and it accepts all email to specified domains > regardless of the user part. This seems to pose a security hole in sending > spam / viruses. > > Say someone sends an email to the server with the from of

Re: How do you manage Perl modules?

2004-02-07 Thread Craig Sanders
On Fri, Feb 06, 2004 at 05:41:18PM -0500, Kris Deugau wrote: > However, I've just discovered that there's also a bad version mismatch > between the "default" libdb version used by DB_File in RedHat, and the one in > Debian (db3 in RedHat vs db1 [I think] in Debian). I also discovered that > this h

Re: How do you manage Perl modules?

2004-02-07 Thread Thomas Lamy
Lucas Albers wrote: I use mimedefang testing, spamaassassing unstable, and kernel 2.4.23, on my production external mx server. Everything else is stable. The only externally exposed service, sendmail is stable. I tried unstable sendmail, but TLS didn't work. And I would not have timelly updates. (I

Re: How do you manage Perl modules?

2004-02-07 Thread Thomas Lamy
Lucas Albers wrote: I use mimedefang testing, spamaassassing unstable, and kernel 2.4.23, on my production external mx server. Everything else is stable. The only externally exposed service, sendmail is stable. I tried unstable sendmail, but TLS didn't work. And I would not have timelly updates. (I

Re: configuring postfix to reject messages to non-existing user account

2004-02-07 Thread David Zejda
1) main.cf: check_recipient_restrictions = check_recipient_access btree:/etc/postfix/virtaccess 2) /etc/postfix/virtaccess file with [EMAIL PROTECTED] OK [EMAIL PROTECTED] OK format, must be converted to btree or something by postmap i guess, the similar stuff can be injected into SQL database..

configuring postfix to reject messages to non-existing user account

2004-02-07 Thread Shri Shrikumar
Hi, I have a postfix installation and it accepts all email to specified domains regardless of the user part. This seems to pose a security hole in sending spam / viruses. Say someone sends an email to the server with the from of "[EMAIL PROTECTED]" and the to of "[EMAIL PROTECTED]", postfix accep

Re: configuring postfix to reject messages to non-existing user account

2004-02-07 Thread David Zejda
1) main.cf: check_recipient_restrictions = check_recipient_access btree:/etc/postfix/virtaccess 2) /etc/postfix/virtaccess file with [EMAIL PROTECTED] OK [EMAIL PROTECTED] OK format, must be converted to btree or something by postmap i guess, the similar stuff can be injected into SQL database..

configuring postfix to reject messages to non-existing user account

2004-02-07 Thread Shri Shrikumar
Hi, I have a postfix installation and it accepts all email to specified domains regardless of the user part. This seems to pose a security hole in sending spam / viruses. Say someone sends an email to the server with the from of "[EMAIL PROTECTED]" and the to of "[EMAIL PROTECTED]", postfix accep

Re: Remote server management

2004-02-07 Thread Markus Oswald
Am Sa, den 07.02.2004 schrieb Micah Anderson um 00:26: > Since we often have limited physical access to our machines, and our > collective members are spread around the country, our holy grail is remote > hardware administration. > > This could mean a lot of things. Mostly, we just need to: > > 1

Re: Remote server management

2004-02-07 Thread Markus Oswald
Am Sa, den 07.02.2004 schrieb Micah Anderson um 00:26: > Since we often have limited physical access to our machines, and our > collective members are spread around the country, our holy grail is remote > hardware administration. > > This could mean a lot of things. Mostly, we just need to: > > 1

Re: Solving "Address already in use"

2004-02-07 Thread Emmanuel Lacour
On Fri, Feb 06, 2004 at 03:34:04PM -0800, Joe Emenaker wrote: > Here's a wierd one. > > Our SpamAssassin daemon crashed and, when I tried to restart it, I got: > > Could not create INET socket: Address already in use IO::Socket::INET: > Address already in use > > ... and I can't find any runni

Re: Solving "Address already in use"

2004-02-07 Thread Emmanuel Lacour
On Fri, Feb 06, 2004 at 03:34:04PM -0800, Joe Emenaker wrote: > Here's a wierd one. > > Our SpamAssassin daemon crashed and, when I tried to restart it, I got: > > Could not create INET socket: Address already in use IO::Socket::INET: > Address already in use > > ... and I can't find any runni