[cobalt-developers] cobalt sendmail tricks/open relay

["t (dot) jay fowler" <tjay@xxxxxxxxxxx>]

Hello -

My ISP just fingered me as an open relay.  I'm not really happy about 
this. I've done research on sendmail in general, and have noticed 
that Cobalt has a really insecure version of sendmail running - 8.10.2

I have followed the instructions provided by my isp on fixing this 
(basically editing my access file) and it still failed.  I've used 
the relay-test.mail-abuse.org test and come back solid, as in ok, no 
relay.  Heres the transcript of the test they used, and the error 
that went through.  Any ideas on how to secure this?

Any help appreciated.



Here's the output of the entire session:

telnet 192.168.0.1 25
Trying 192.168.0.1 ..
Connected to 192.168.0.1.
Escape character is '^]'.
helo
220 icky.mintyfish.com ESMTP Sendmail 8.10.2/8.10.2; Fri, 21 Mar 2003 
15:12:00 -0800
501 5.0.0 helo requires domain address
helo host.domain.com
250 host.domain.com Hello web0.speakeasy.net [216.254.0.11], pleased 
to meet you
mail from:me@xxxxxxxxxxxxxxx
553 5.3.0 me@xxxxxxxxxxxxxxxxxx No such user here
mail from:<me@xxxxxxxx>
451 4.1.8 <me@xxxxxxxx>... Domain of sender address me@xxxxxxxx does 
not resolve
mail from:<me@xxxxxxxxxxxxxxx>
553 5.3.0 <me@xxxxxxxxxxxxxxx>... No such user here
mail from:postmaster@xxxxxxxxxxxxxxx
250 2.1.0 postmaster@xxxxxxxxxxxxxxxxxx Sender ok
rcpt to:mailer@xxxxxxxxxxxxx
250 2.1.5 mailer@xxxxxxxxxxxxxxxx Recipient ok
data
354 Enter mail, end with "." on a line by itself
test for open relay
.
250 2.0.0 h2LNDwD31926 Message accepted for delivery
^]
telnet> q
Connection closed.