[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Fwd: Re: [RaQ2] Re: speaking of spam...



Oops. Forgot to look at the To field again.
> 
> Sorry. You must have had a reply-to set.
> > > 
> > > Received: from mail.serve.co.kr (IDENT:root@[211.233.10.69])
> > > 
> > 
> > no, the ip and the domain try to match the conenction id when the
> remote
> > server connects during HELO , however if the remote machines lies it
> may
> > not match, so it's best to use IP address if at all possible, sendmail
> on
> > the raq2 will complain if the IP doesn't match the claimed domain name,
> > but it allows the connection anyhow....
> > 
> > (One exception to the above, if an @ appears in the name, it's matched
> to
> > From instead, eg luser@xxxxxxx only matches against from address
> (fairly
> > pointless unless you just have an idiot too stupid to forge their from
> > address)
> > 
> > btw, all these ip's/domain names are in /etc/mail/access , i have found
> > the GUI to be a touch flaky about handling large numbers of entries
> here
> > (it forgets them when listing them)
> 
> That may be the problem as I do have a lot of entries in there, however
> it
> still allows mail from any co.kr. Otherwise the received header would
> have
> bounced, which it didn't until I added the IP address. It doesn't seem to
> have a problem with blocking by IP instead of domain. 
> <<< 550 Mail rejected due to possible SPAM
> Got that when I sent from one email address to another on the server via
> the open relay 211.233.10.69.
> 
> > 
> > also, for cases like the domain above, i find it better to block a
> > shorter
> > segment of the domain, in case there's multiple mail servers, eg
> instead
> > of mail.serve.co.kr, block just serve.co.kr , that will also match
> > mail2.serve.co.kr ...
> 
> Tried blocking just co.kr but that didn't work.
> 
> > 
> > Remember if you edit /etc/mail/access by hand, you must rehash it, eg:
> > 
> > makemap hash /etc/mail/access.db < /etc/mail/access
> 
> Only edited it via the GUI. I'd certainly like to see a better method of
> adding to it as the tiny textarea Cobalt provides makes for quite a
> difficult time when scrolling the list.
> I'm not sure why the entire list needs to be run each time a new entry is
> added. I would think a simple one line text input to add the new block
> would be enough. <http://www.aitcom.net/demo/cpanel/spam.html>
> 
> > > "Block email from... In this field, enter email addresses or
> > > domains from which you don't want to received any email.
> > > Anyone trying to send you messages from one of these
> > > addresses or domains will receive an error message in return."
> > 
> > Which makes perfect sense *after* you understand how it all works -/
> > 
> This being an appliance, the instructions should explain how it works and
> what it does. I didn't have to read up on motor mechanics to understand
> how
> to add detergent to my washer. Otherwise they should market it as a
> server.
> Not a server appliance.
> 
> -- 
> Dan Kriwitsky
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail - only $35 
> a year!  http://personal.mail.yahoo.com/
> 


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/