Thanks for your answer Ed,
What is the effect when I add nobody to the end of the alias line as you
suggest bellow ?
I use postfix with virtual users stored in mysql. Only majordomo aliases
are stored in local alias table. I cannot use virtusertable.I forgot to
describe one problem.
I have domain @test.com. I set in my virtual alias ( according to
http://www.postfix.org/VIRTUAL_README.html ) in my virtual table( or
file, it doesn't matter )
test@test.com test , and in my alias is
test "| /usr/local/majordomo/wrapper resend -l test
test-list"
test-list :include:/usr/local/majordomo/lists/test
But spammers sent an email directly to test-list@mail.test.com and it
means, postfix looked directly to alias table ( not virtual table )
I tried to use in my virtual table this;
test-list@mail.test.com error:nouser User unknown, and it works for
the message to test-list@mail.test.com, but it doesn't work for correct
mailing list test@test.com, cause when
test@mail.test.com pass message to test-list ( postfix looks again to
the virtual table ) and send message not to
:include:/usr/local/majordomo/lists/test but to error:nouser User
unknown
Thanks for an advices
BR
Pet
-----Original Message-----
From: majordomo-users-owner@greatcircle.com
[mailto:majordomo-users-owner@greatcircle.com] On Behalf Of Ed Kasky
Sent: Thursday, April 27, 2006 7:47 PM
To: Jevos, Peter
Cc: majordomo-users@greatcircle.com
Subject: Re: Problem with aliases
At 09:23 AM Thursday, 4/27/2006, you wrote -=>
>Hello
>I'd like to ask you if my aliases are correct cause I have one problem:
>
>owner-test a@a.com
>test "| /usr/local/majordomo/wrapper resend -l test
test-list"
For security purposes (I think) you should add nobody to the end of this
line:
/usr/local/majordomo/wrapper resend -l test test-list,nobody
>test-request "|/usr/local/majordomo/wrapper request-answer test"
>test-approval a@a.com
>test-list :include:/usr/local/majordomo/lists/test
>
>In my test.config is : restrict_post=access, where access file contains
>users can send to address test@test.com. But when I send email to
>address test-list@test.com, restrict post parameter doesn't work.
This is a known issue and as a fix, add the following to your
virtusertable and rebuild the db:
test-list@test.com error:nouser User unknown
This will prevent unauthorized posting to the list.
I am assuming that postfix works the same as sendmail in this respect.
Maybe someone can correct me if I'm worn...
Ed Kasky
~~~~~~~~~
Randomly Generated Quote (390 of 503):
No wonder nobody comes here--it's too crowded. -Yogi Berra
Follow-Ups:
|
|
