[cobalt-users] How to stop raq550 from relaying spam from the same ip-block?

["Bas van Ecke" <bas.vanecke@xxxxxxxxxx>]

Hello cobaltians,

In relay-tests our raq550 was not relaying email.
But in the log-file we suddenly found a lot of entries that indicated that
our machine was relaying email of a machine in the same ip-block.

All our sites have APOP and in the email server administration there is
APOP checked. In the box with relay domains there is just 127.0.0.1 and
the ip of our server.

So, what is going on? Everything seems closed but we are still relaying :-(.

Then we started to check sendmail configuration files. To our surprise,
the source of the problem originates in /etc/mail/access file.
There is an entry, which is not shown in the GUI, that allows relaying for
the whole ip-block!

So if your ip is 111.222.111.222 then there is a entry that allows
relaying for 111.222.111
Of course this can be handy if you host a lot of sites on different ip's.
But should this be standard configured like this?

Cause I am no sendmail guru, is there somebody who can explain a bit more
about this if this is normal behavior or is it a bug in the raq 550?

And more important, what's the best way to solve this?
Can we change this "block-ip" in the access file without problems to
111.222.111.222? Or do we have to use something special, because there is
also an access.db file which I don't know how to read or to adjust?

Regards, Bas