Re: Postfix is spammer-friendly by default on potato and woody

2000-11-04 Thread Michael Meskes
On Fri, Nov 03, 2000 at 02:57:21PM +0100, Peter Palfrader wrote: > mynetworks=127.0.0.1/8 does instruct postfix to accept mails from 127/8. This > includes localhost. This has nothing to do at all with From and To addresses. Yes, I know. At first I tried to configure my machine to not relay for lo

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-04 Thread Michael Meskes
On Fri, Nov 03, 2000 at 02:57:21PM +0100, Peter Palfrader wrote: > mynetworks=127.0.0.1/8 does instruct postfix to accept mails from 127/8. This > includes localhost. This has nothing to do at all with From and To addresses. Yes, I know. At first I tried to configure my machine to not relay for l

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Peter Palfrader
Hi Michael! On Fri, 03 Nov 2000, Michael Meskes wrote: > On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > > It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you > > will be an open relay for the entire _class_A_ net 62. > > Unfortunately not just for thi

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Peter Palfrader
Hi Michael! On Fri, 03 Nov 2000, Michael Meskes wrote: > On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > > It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you > > will be an open relay for the entire _class_A_ net 62. > > Unfortunately not just for th

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Fri, Nov 03, 2000 at 12:59:31AM -0900, Ethan Benson wrote: > no, machines in your network are allowed to relay, if i were to > connect to your port 25 (which i won't) and try the same thing it > would refuse to accept it. Yes, I realized that AFTER sending my mail. I thought I had configured it

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
Please disregard my last two mails. While testing postfix I misconfigured it and that's why it was relaying. I just noticed this too late. Sorry. Michael -- Michael Meskes Michael@Fam-Meskes.De Go SF 49ers! Go Rhein Fire! Use Debian GNU/Linux! Use PostgreSQL!

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Ethan Benson
On Fri, Nov 03, 2000 at 10:22:32AM +0100, Michael Meskes wrote: > On Thu, Nov 02, 2000 at 10:09:10AM -0600, An Thi-Nguyen Le wrote: > > set up myself that has a default potato debian install, with postfix > > (default as well). > > Well I do run woody, but: > > [EMAIL PROTECTED]:~$ telnet localh

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you > will be an open relay for the entire _class_A_ net 62. Unfortunately not just for this. > If you do not set mynetworks postfix guesses it from the inte

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Thu, Nov 02, 2000 at 10:09:10AM -0600, An Thi-Nguyen Le wrote: > set up myself that has a default potato debian install, with postfix > (default as well). Well I do run woody, but: [EMAIL PROTECTED]:~$ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 2

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Fri, Nov 03, 2000 at 12:59:31AM -0900, Ethan Benson wrote: > no, machines in your network are allowed to relay, if i were to > connect to your port 25 (which i won't) and try the same thing it > would refuse to accept it. Yes, I realized that AFTER sending my mail. I thought I had configured i

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
Please disregard my last two mails. While testing postfix I misconfigured it and that's why it was relaying. I just noticed this too late. Sorry. Michael -- Michael Meskes [EMAIL PROTECTED] Go SF 49ers! Go Rhein Fire! Use Debian GNU/Linux! Use PostgreSQL! -- To UNSUBSCRIBE, email to [EMAIL

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Ethan Benson
On Fri, Nov 03, 2000 at 10:22:32AM +0100, Michael Meskes wrote: > On Thu, Nov 02, 2000 at 10:09:10AM -0600, An Thi-Nguyen Le wrote: > > set up myself that has a default potato debian install, with postfix > > (default as well). > > Well I do run woody, but: > > mme@feivel:~$ telnet localhost 25

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you > will be an open relay for the entire _class_A_ net 62. Unfortunately not just for this. > If you do not set mynetworks postfix guesses it from the int

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-03 Thread Michael Meskes
On Thu, Nov 02, 2000 at 10:09:10AM -0600, An Thi-Nguyen Le wrote: > set up myself that has a default potato debian install, with postfix > (default as well). Well I do run woody, but: mme@feivel:~$ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 fei

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Cordes
On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > > mail-abuse.org just test relaying...and postfix fails the test, but doesn't > > it fails? since when? or rather what are you defining as failure? in > my tests it refused to relay each and every attempt from them. This migh

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread An Thi-Nguyen Le
On Thu, Nov 02, 2000 at 11:49:35AM +0100, Ingemar Fällman typed: } Try this :) } } telnet some.other.host.running.postfix 25 } HELO my.hostname } MAIL FROM:<[EMAIL PROTECTED]> } RCPT TO:<[EMAIL PROTECTED]> } DATA } Testing testing } . } QUIT Hostnames have been changed to protect the innocent (al

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Cordes
On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > > mail-abuse.org just test relaying...and postfix fails the test, but doesn't > > it fails? since when? or rather what are you defining as failure? in > my tests it refused to relay each and every attempt from them. This mig

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread An Thi-Nguyen Le
On Thu, Nov 02, 2000 at 11:49:35AM +0100, Ingemar Fällman typed: } Try this :) } } telnet some.other.host.running.postfix 25 } HELO my.hostname } MAIL FROM:<[EMAIL PROTECTED]> } RCPT TO:<[EMAIL PROTECTED]> } DATA } Testing testing } . } QUIT Hostnames have been changed to protect the innocent (a

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Palfrader
Hi Ethan! On Thu, 02 Nov 2000, Ethan Benson wrote: > > If you do not set mynetworks postfix guesses it from the interfaces and > > allows > > all hosts on the classful subnets of those interfaces to relay through you. > > ah! i see didn't think of that one... so you need to specify > mynetworks

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > Hi! > > On Thu, 02 Nov 2000, Borut Mrak wrote: > > > On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > > so my question now is postfix a open relay by default or not? > > > > No. > > It is. For a (not so) smal

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Palfrader
Hi! On Thu, 02 Nov 2000, Borut Mrak wrote: > On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > so my question now is postfix a open relay by default or not? > > No. It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you will be an open relay for the entir

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Itai Zukerman
> So, Postfix appears to be an open relay to the stupid mail-abuse.org > test, because the test does not confirm the relay when it receives its > message back, but right after it gives it away. This is also the case for Exim, I believe, with a standard configuration (percent_hack_domains commented

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Borut Mrak
On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > mail-abuse.org just test relaying...and postfix fails the test, but doesn't > > it fails? since when? or rather what are you defining as failure? in > my tests it refused to relay each and every attempt from them. The default (

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 12:05:00PM +0100, Borut Mrak wrote: > > Hmm...wise decision ;-] indeed... > mail-abuse.org just test relaying...and postfix fails the test, but doesn't it fails? since when? or rather what are you defining as failure? in my tests it refused to relay each and every att

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Borut Mrak
On Thu, Nov 02, 2000 at 01:58:52AM -0900, Ethan Benson wrote: > > MAIL FROM:<[EMAIL PROTECTED]> > > RCPT TO:<[EMAIL PROTECTED]> > > well i don't know anyone running postfix who i can ask to test this > with... im certainly not going to go try it without asking ! bad karma > ;-) Hmm...wise decisio

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ivo Simicevic
On Thu, Nov 02, 2000 at 01:43:11AM -0900, Ethan Benson wrote: > > did you run a test to see if this was really the case? such as telnet > mail-abuse.org > I didn't find this test very accurate. Look this log : = $ telnet mail-abuse.org Trying 2

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Palfrader
Hi Ethan! On Thu, 02 Nov 2000, Ethan Benson wrote: > > If you do not set mynetworks postfix guesses it from the interfaces and allows > > all hosts on the classful subnets of those interfaces to relay through you. > > ah! i see didn't think of that one... so you need to specify > mynetworks wit

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 11:49:35AM +0100, Ingemar Fällman wrote: > Try this :) > > telnet some.other.host.running.postfix 25 > HELO my.hostname > MAIL FROM:<[EMAIL PROTECTED]> > RCPT TO:<[EMAIL PROTECTED]> > DATA > Testing testing > . > QUIT well i don't know anyone running postfix who i can ask

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ingemar Fällman
Try this :) telnet some.other.host.running.postfix 25 HELO my.hostname MAIL FROM:<[EMAIL PROTECTED]> RCPT TO:<[EMAIL PROTECTED]> DATA Testing testing . QUIT Ethan Benson wrote: > > On Thu, Nov 02, 2000 at 10:42:38AM +0100, Ingemar Fällman wrote: > > Hi > > > > When i was looking trough my logs t

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 10:42:38AM +0100, Ingemar Fällman wrote: > Hi > > When i was looking trough my logs tody i found that my host had been > used > as a relay host... I changed from sendmail to postfix because everyone > told > me that postfix was more secure. > > When looking at the default

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 01:17:21PM +0100, Peter Palfrader wrote: > Hi! > > On Thu, 02 Nov 2000, Borut Mrak wrote: > > > On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > > so my question now is postfix a open relay by default or not? > > > > No. > > It is. For a (not so) sma

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Peter Palfrader
Hi! On Thu, 02 Nov 2000, Borut Mrak wrote: > On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > so my question now is postfix a open relay by default or not? > > No. It is. For a (not so) small set of hosts. Assuming your box is 62.1.2.3 you will be an open relay for the enti

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Itai Zukerman
> So, Postfix appears to be an open relay to the stupid mail-abuse.org > test, because the test does not confirm the relay when it receives its > message back, but right after it gives it away. This is also the case for Exim, I believe, with a standard configuration (percent_hack_domains commente

Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ingemar Fällman
Hi When i was looking trough my logs tody i found that my host had been used as a relay host... I changed from sendmail to postfix because everyone told me that postfix was more secure. When looking at the default configurationfiles installed by debian there was nothing that prevents unauthorized

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Borut Mrak
On Thu, Nov 02, 2000 at 02:24:36AM -0900, Ethan Benson wrote: > > mail-abuse.org just test relaying...and postfix fails the test, but doesn't > > it fails? since when? or rather what are you defining as failure? in > my tests it refused to relay each and every attempt from them. The default

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 12:05:00PM +0100, Borut Mrak wrote: > > Hmm...wise decision ;-] indeed... > mail-abuse.org just test relaying...and postfix fails the test, but doesn't it fails? since when? or rather what are you defining as failure? in my tests it refused to relay each and every at

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Borut Mrak
On Thu, Nov 02, 2000 at 01:58:52AM -0900, Ethan Benson wrote: > > MAIL FROM:<[EMAIL PROTECTED]> > > RCPT TO:<[EMAIL PROTECTED]> > > well i don't know anyone running postfix who i can ask to test this > with... im certainly not going to go try it without asking ! bad karma > ;-) Hmm...wise decisi

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ivo Simicevic
On Thu, Nov 02, 2000 at 01:43:11AM -0900, Ethan Benson wrote: > > did you run a test to see if this was really the case? such as telnet mail-abuse.org > I didn't find this test very accurate. Look this log : = $ telnet mail-abuse.org Trying 204

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 11:49:35AM +0100, Ingemar Fällman wrote: > Try this :) > > telnet some.other.host.running.postfix 25 > HELO my.hostname > MAIL FROM:<[EMAIL PROTECTED]> > RCPT TO:<[EMAIL PROTECTED]> > DATA > Testing testing > . > QUIT well i don't know anyone running postfix who i can ask

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ingemar Fällman
Try this :) telnet some.other.host.running.postfix 25 HELO my.hostname MAIL FROM:<[EMAIL PROTECTED]> RCPT TO:<[EMAIL PROTECTED]> DATA Testing testing . QUIT Ethan Benson wrote: > > On Thu, Nov 02, 2000 at 10:42:38AM +0100, Ingemar Fällman wrote: > > Hi > > > > When i was looking trough my logs

Re: Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ethan Benson
On Thu, Nov 02, 2000 at 10:42:38AM +0100, Ingemar Fällman wrote: > Hi > > When i was looking trough my logs tody i found that my host had been > used > as a relay host... I changed from sendmail to postfix because everyone > told > me that postfix was more secure. > > When looking at the default

Postfix is spammer-friendly by default on potato and woody

2000-11-02 Thread Ingemar Fällman
Hi When i was looking trough my logs tody i found that my host had been used as a relay host... I changed from sendmail to postfix because everyone told me that postfix was more secure. When looking at the default configurationfiles installed by debian there was nothing that prevents unauthorize