Debian Developers - Re: Bug#457318: ITP: qmail -- a secure, reliable, efficient, simple message transfer

This is Interesting: Free IT Magazines  
Home > Archive > Debian Developers > December 2007 > Re: Bug#457318: ITP: qmail -- a secure, reliable, efficient, simple message transfer





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Re: Bug#457318: ITP: qmail -- a secure, reliable, efficient, simple message transfer
Russ Allbery

2007-12-24, 7:20 pm

Kalle Kivimaa <killer@debian.org> writes:
> Turbo Fredriksson <turbo@debian.org> writes:



qmail-smtpd in djb's stock distribution with no patches is not capable of
being configured to prevent reflected spam. I'll take various people's
word that the patch sets fix this.
[vbcol=seagreen]
> How can you configure the QMail to send error messages only to
> non-forged sender addresses? I don't see any way of differentiating
> these, so the only way to do it is during the SMTP session.


You verify the sender address during the SMTP session and don't accept the
mail if it's not for a valid local address. This requires keeping some
sort of database or other information that qmail-smtpd can query to use to
reject unknown addresses immediately.

--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com