Re: open relay

[faq@xxxxxxxxx (faQ)]

Robert,

on 1/28/03 10:33 PM, Bob Minor at bob@xxxxxxxxxxxxx wrote:

> right but its not suppose to. Its suppose to see its not for the local
> domain and then reject it.
> 
This is not quite correct. You are confusing the "Local Mail Domains" in the
"External Relay Restrictions:" section (top of the page) with the "Local
Mail Domains" in the "Allow delivery to:"  section (bottom of the page).

It is checking to see if it is FROM the local mail domain based solely on
the Mail From mail envelope.  This is not the best way to check and should
not be enabled.  The syntax on this form will be changed slightly in future
versions. 

The one on the bottom does what you are referring to:
ie:
Allow delivery to:
 Local Mail Domains

TTS
--Eric

> On Tuesday, January 28, 2003, at 11:46 PM, Bruce Sommer wrote:
> 
>> "When relay restrictions are set using domain names, Post.Office
>> checks the
>> return address on the envelope of every message in the system against
>> the list
>> of allowed or restricted domains. Because a user can easily alter
>> his/her return
>> address to include any domain, using domains to restrict or allow
>> relaying is
>> not as secure as restricting by IP addresses."
>> 
> Robert Minor
> 
> 

---------
Tenon Intersystems' Post.Office Mailing 
List
To unsubscribe: send mail to 
post_office-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives 
at:
http://postoffice.computeroil.com/