Re: postfix security configuration

2003-08-14 Thread Wilfried Essig
Am Son, 2003-08-10 um 12.26 schrieb Fallen Angel: > hi, > > my config: > debian stable 3.0r1 > postfix > qpopper > > I have a small problem: > > my smtp after pop3 configuration works fine, no open relay possible, but > the authentificated users can fake their own e-mail address. > > How can

Re: postfix security configuration

2003-08-14 Thread Tomasz Papszun
On Sun, 10 Aug 2003 at 10:26:16 +, Fallen Angel wrote: > > my config: > debian stable 3.0r1 > postfix > qpopper > > I have a small problem: > > my smtp after pop3 configuration works fine, no open relay possible, but > the authentificated users can fake their own e-mail address. > > How

Re: postfix security configuration

2003-08-14 Thread Tarjei Huse
This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz > Papszun: > >> > > > > If you want to prevent them fr

Re: postfix security configuration

2003-08-14 Thread Marcel Weber
Tarjei Huse wrote: This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: Another good thing is the postfix ([EMAIL PROTECTED]) mailing list. It is quite a high traffic mailing list, but there are very expirienced people reading it

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
Tarjei Huse wrote: This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: Another good thing is the postfix ([EMAIL PROTECTED]) mailing list. It is quite a high traffic mailing list, but there are very expirienced people readi

Re: postfix security configuration

2003-08-11 Thread Wilfried Essig
Am Son, 2003-08-10 um 12.26 schrieb Fallen Angel: > hi, > > my config: > debian stable 3.0r1 > postfix > qpopper > > I have a small problem: > > my smtp after pop3 configuration works fine, no open relay possible, but > the authentificated users can fake their own e-mail address. > > How can

postfix security configuration

2003-08-11 Thread Fallen Angel
hi, my config: debian stable 3.0r1 postfix qpopper I have a small problem: my smtp after pop3 configuration works fine, no open relay possible, but the authentificated users can fake their own e-mail address. How can I stop it, so they can only use the adress which were set up for them. th

Re: postfix security configuration

2003-08-11 Thread Tarjei Huse
This might help: http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt On Mon, 2003-08-11 at 13:37, Marcel Weber wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz > Papszun: > >> > > > > If you want to prevent them fr

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz Papszun: If you want to prevent them from using non existing sender addresses from your domain, you can do it by creating a file (lookup table) for postmap(1), containing all allow

Re: postfix security configuration

2003-08-11 Thread Tomasz Papszun
On Sun, 10 Aug 2003 at 10:26:16 +, Fallen Angel wrote: > > my config: > debian stable 3.0r1 > postfix > qpopper > > I have a small problem: > > my smtp after pop3 configuration works fine, no open relay possible, but > the authentificated users can fake their own e-mail address. > > How

Re: postfix security configuration

2003-08-11 Thread Marcel Weber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Montag, 11.08.03, um 12:59 Uhr (Europe/Zurich) schrieb Tomasz Papszun: If you want to prevent them from using non existing sender addresses from your domain, you can do it by creating a file (lookup table) for postmap(1), containing all allowed add

postfix security configuration

2003-08-10 Thread Fallen Angel
hi, my config: debian stable 3.0r1 postfix qpopper I have a small problem: my smtp after pop3 configuration works fine, no open relay possible, but the authentificated users can fake their own e-mail address. How can I stop it, so they can only use the adress which were set up for them.