I want to say the Jeff's solution works great. One thing is that there are
some order dependencies in the inserted code Jeff supplied and section
headers needed when you modify your vanilla sendmail files.
-- John Heffernan
-- Educational Technology Consultant
-- Hampshire Educational Collaborative
-- 97 Hawley Street
-- Northampton, MA 01060-2327
-- 413.586.4900 x144 (tel)
-- 413.586-0180 (fax)
-- http://learn.collaborative.org/
> From: Jeff Wasilko <jeffw@smoe.org>
> Date: Wed, 22 Oct 2003 12:24:44 -0400
> To: Bill Fant <bfant@charm.net>
> Cc: majordomo-users@greatcircle.com
> Subject: Re: spammed using list-outgoing address
>
> On Wed, Oct 22, 2003 at 12:13:07PM -0400, Bill Fant wrote:
>> My list has been spammed, for the first time, by someone using the
>> list-outgoing address. I have read the FAQ, and before attempting any of
>> the prescriptions (other than restrict_post), I tried one that was not
>> mentioned -- using the regexp /^to.*listname-outgoing/ in taboo header.
>> This did *not* prevent a test email, from me to listname-outgoing, from
>> going directly to the list.
>>
>> So, with thanks in advance, I am wondering if I have the regexp wrong, or
>> if this solution does not work for other reasons.
>
> Majodomo has nothing to do with the -outgoing address, so you
> can't use majordomo to keep people from sending mail to it.
>
> I added some rules to sendmail to block outside access to
> -outgoing and it's worked well. Here's the rules to drop into
> your .mc file:
>
> (note that if you copy & paste these, the LHS/RHS need to be
> separated by tabs, not spaces)
>
> LOCAL_CONFIG
> Koutgoing regex -a@MATCH \-outgoing$
>
> LOCAL_RULESETS
> SLocal_check_rcpt
> # kill attempts to send directly to majordomo's -outgoing aliases
> R$* $:$&{client_addr}<>$1
> R127.0.0.1<>$* $@ LOCALMAILISOK
> R$*<>$* $:$2
> R$* $: <> $>Parse0 $>3 $1
> R <> $+ < @ $=w . > $: $(outgoing $1 $)
> R <> < @ $=w . > : $+ $: $(outgoing $2 $)
> R <> $* < @ $* > $* $: NOMATCH
> R <> $+ $: $(outgoing $1 $)
> R@MATCH $#error $: 550 Do not use -outgoing address
>
>
References:
|
|
