Re: open relay

Just so everybody knows the history,

This version was before Tenon took over the Post.Office project, and the
problem you are describing was one of the first issues we recognized and
fixed for the Mac OS X version.

--Eric

on 1/29/03 8:09 AM, Carl Chipman at cchipman@xxxxxxxxxxxx wrote:

> Not version 3.1.2 :)
> 
> And we want to allow our traveling employees to use the SMTP server, but not
> God
> and Everybody to.
> So we couldn't just restrict it by IP.
> 
> Carl
> 
> 
> -----Original Message-----
> From: faQ [mailto:faq@xxxxxxxxx]
> Sent: Wednesday, January 29, 2003 2:40 AM
> To: cchipman@xxxxxxxxxxxx
> Subject: Re: open relay
> 
> Carl,
> 
> Post.Office ships as closed-relay.  What were thesettings you configured?
> 
> --Eric
> 
> on 1/28/03 10:25 PM, Carl Chipman at cchipman@xxxxxxxxxxxx wrote:
> 
>> We could never fully secure Post.Office against open relay.  Eventually we
>> had
>> to use another SMTP server which allows relay only to our system, unless you
>> authenticate and then it allows mail to relay to anywhere.
>> 
>> Carl Chipman
>> 
>> 
>> -----Original Message-----
>> From: Bruce Sommer [mailto:bes-tech1@xxxxxxxxxxxxxxxx]
>> Sent: Tuesday, January 28, 2003 11:47 PM
>> To: post_office@xxxxxxxxxxxxxxx
>> Subject: Re: open relay
>> 
>> You might want to remove the "local mail domain" option from the "External
>> Relay
>> Restrictions" section.
>> 
>>> From section 4.5.1 of the Admin manual:
>> 
>> "When relay restrictions are set using domain names, Post.Office checks the
>> return address on the envelope of every message in the system against the
>> list
>> of allowed or restricted domains. Because a user can easily alter his/her
>> return
>> address to include any domain, using domains to restrict or allow relaying is
>> not as secure as restricting by IP addresses."
>> 
>> On 1/28/03 at 23:22 bob@xxxxxxxxxxxxx (Bob Minor) stated:
>> 
>>> I have inherited a tenon post.office system. osirusoft thinks its an
>>> open relay even though I chose "Restrict relay mail except these ip's
>>> and local domains ". Then I chose "and only if delivery is for local
>>> domains".
>> -----
>> Bruce Sommer
>> bes-tech1@xxxxxxxxxxxxxxxx
>> http://www.sommerfamily.org/~besommer/index.html
>> 
>> "SCSI is *NOT* magic.  There are *fundamental technical reasons* why it is
>> necessary to sacrifice a young goat to your SCSI chain now and then."
>> -- John Woods
>> 
>> Lifetime Member of JPFO <http://www.jpfo.org/>
>> ---------
>> Tenon Intersystems' Post.Office Mailing
>> List
>> To unsubscribe: send mail to
>> post_office-request@xxxxxxxxxxxxxxx
>> with the body only containing:
>> unsubscribe
>> Find the searchable mailing list archives
>> at:
>> http://postoffice.computeroil.com/
>> 
>> ---
>> Incoming mail is certified Virus Free.
>> Checked by AVG anti-virus system (http://www.grisoft.com).
>> Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003
>> 
>> ---
>> Outgoing mail is certified Virus Free.
>> Checked by AVG anti-virus system (http://www.grisoft.com).
>> Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003
>> 
>> 
>> ---------
>> Tenon Intersystems' Post.Office Mailing
>> List
>> To unsubscribe: send mail to
>> post_office-request@xxxxxxxxxxxxxxx
>> with the body only containing:
>> unsubscribe
>> Find the searchable mailing list archives
>> at:
>> http://postoffice.computeroil.com/
> 
> 
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.445 / Virus Database: 250 - Release Date: 1/21/2003
> 
> 

---------
Tenon Intersystems' Post.Office Mailing 
List
To unsubscribe: send mail to 
post_office-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives 
at:
http://postoffice.computeroil.com/