Re: Help with hijacked sendmail

From: John S. Jacob (jsjacob@iamnota.com)
Date: 09/26/01 

Date: Wed, 26 Sep 2001 14:55:46 -0700
From: "John S. Jacob" <jsjacob@iamnota.com>
To: Mogens Valentin <monz@danbbs.dk>
Subject: Re: Help with hijacked sendmail
Message-ID: <20010926145546.E2794@iamnota.com>

On Wed, Sep 26, 2001 at 10:34:21PM +0200, Mogens Valentin wrote:
> Sure, but all it takes to make sendmail resonably secure is update to
> latest version and do somthing like:

Sendmail 8.11.6 is the current recommendation from Sendmail.org.

To rid myself of most SPAM I also like to use the RBL. In sendmail.mc I
added:

FEATURE(dnsbl,blackholes.mail-abuse.org', Mail from $&{client_addr} rejected, see http://mail-abuse.org/cgi-bin/lookup?$&{client_addr}')dnl
FEATURE(dnsbl,relays.mail-abuse.org', Mail from $&{client_addr} rejected; see http://mail-abuse.org/cgi-bin/nph-rss?$&{client_addr}')dnl
FEATURE(dnsbl,dialups.mail-abuse.org', Mail from dial-up rejected; see http://mail-abuse.org/dul/enduser.htm')

I was worried when I first put these in -- now it's been over a year and I
have yet to see a message wrongly rejected.

My outside SMTP receiver is now exim and it can also use the RBL:

rbl_domains = blackholes.mail-abuse.org/reject : dialups.mail-abuse.org/reject : relays.mail-abuse.org/reject
rbl_reject_recipients = true 

-- 
John S. Jacob * mailto:jsjacob@iamnota.com * http://www.iamnota.com/
PGP public key: http://jsjacob.iamnota.com/public_key.txt
   Fingerprint: D410 0485 D86C B387 4909  C811 48B6 29CE AC6A CE17

Relevant Pages

  • can AUTH override RBL?
    ... Is there some way to allow an authenticated user from an IP listed in an RBL to send outgoing mail through my FreeBSD system running SendMail? ... dnl FEATURE(`dnsbl', `relays.ordb.org', `"550 Email rejected due to sending serv ...
    (comp.mail.sendmail)
  • Re: blacklist(s)
    ... Sorry, Gary, can't help you here, I don't use Sendmail ... I have spamcop setup as an RBL on my system, and yesterday alone, they ...
    (freebsd-questions)
  • latest sendmail with RBL needs whitelist
    ... We have implemented RBL on the latest sendmail but now need to allow a few ... valid users through the net. ... I sthere a way to maintain a list of valid ...
    (comp.mail.sendmail)
  • Re: Help with hijacked sendmail
    ... Subject: Help with hijacked sendmail ... but all it takes to make sendmail resonably secure is update to ... The moral of the story here isn't whether you're running postfix, exim, ... Bugs are found and fixed. ...
    (Focus-Linux)
  • Re: Help with hijacked sendmail
    ... > RK> It could be your mail server is acting as an open relay. ... > RK> Sendmail default now deny open relay after version 8.9. ... but all it takes to make sendmail resonably secure is update to ...
    (Focus-Linux)