Re: Help with hijacked sendmail

From: Thiago Conde Figueiro (thiago@cipher.com.br)
Date: 09/26/01 

Date: Wed, 26 Sep 2001 09:05:51 -0300
From: Thiago Conde Figueiro <thiago@cipher.com.br>
To: focus-linux@securityfocus.com
Subject: Re: Help with hijacked sendmail
Message-Id: <20010926090551.3640089c.thiago@cipher.com.br>

On Mon, 24 Sep 2001 22:32:34 -0400, Rajeev Kumar <rajeev@rajeevnet.com> wrote:

RK> Dan,
RK> It could be your mail server is acting as an open relay. Sendmail
RK> default now deny open relay after version 8.9. So if you are running sendmail
(...)

        Why not stop using sendmail altogether? Sendmail has a long, sad history of exploits. Ever after I found out about Postfix (a secure replacement for sendmail) my worries with smtp have dropped to almost zero.

My $0.02 

-- 
Thiago Conde Figueiró
Desenvolvedor de sistemas
Cipher Technology
http://www.cipher.com.br/

_____
"Segurança em TI - uma especialidade Cipher Technology"

Relevant Pages

  • Re: ordb open relay
    ... > I submitted my ip to ORDB for on open relay test, and they told me a had ... I use Sendmail and Sophos MailMonitor. ... I had to setup stupid sophos couple months ago in one place. ... put sendmail on port 25 and repeat relay test. ...
    (comp.os.linux.security)
  • Re: ordb open relay
    ... and the email server sits behind a linux firewall running ... > I submitted my ip to ORDB for on open relay test, ... I use Sendmail and Sophos MailMonitor. ... Is it problem having those things (localhost, ...
    (comp.os.linux.security)
  • Re: Help with hijacked sendmail
    ... Subject: Help with hijacked sendmail ... default now deny open relay after version 8.9. ... > I noticed some odd behavior going on in my maillog file. ...
    (Focus-Linux)
  • Re: ordb open relay
    ... > I submitted my ip to ORDB for on open relay test, and they told me a had ... I use Sendmail and Sophos MailMonitor. ... >Mail monitor has some features with restrict/allow clients, ...
    (comp.os.linux.security)
  • Beaten to Death: Open Relay
    ... I'm having tremendous difficulty getting Sendmail set up to close ... its open relay status AND let people from my office send mail from ... relaying, good or bad. ... people in my office send mail through the server is to include the IP ...
    (comp.mail.sendmail)