Great Circle Associates Majordomo-Users
(April 2006)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Problem with aliases - SOLVED
From: "Jevos, Peter" <Peter . Jevos @ Oriflame-SW . Com>
Date: Fri, 28 Apr 2006 14:42:20 +0200
To: "Ed Kasky" <ed @ esson . net>
Cc: <majordomo-users @ greatcircle . com>
Thread-index: AcZqv7QNbst/w9iWQ2+I018q4gAsXAAAOnKQ
Thread-topic: Problem with aliases - SOLVED

Hi Ed 

I cannot add an entry
test@mail.test.com              test
into virtual table cause it creates loop
It's better and easier to use check_recipent_access  ( postfix feature )
that it rejects every mail from outside directed to test@mail.test.com,
test-list@mail.test.com. Allowed address is only test@test.com

Thanks

BR

Pet  

-----Original Message-----
From: Ed Kasky [mailto:ed@esson.net] 
Sent: Friday, April 28, 2006 2:31 PM
To: Jevos, Peter
Cc: majordomo-users@greatcircle.com
Subject: RE: Problem with aliases

At 01:13 AM Friday, 4/28/2006, Jevos, Peter wrote -=>
>
>Thanks for your answer Ed,
>
>What is the effect when I add nobody to the end of the alias line as 
>you suggest bellow ?

As I said in my first message - I can't remember exactly why.  If you
search the archives, I am sure there will be an explanation...

>I use postfix with virtual users stored in mysql. Only majordomo 
>aliases are stored in local alias table. I cannot use virtusertable.I 
>forgot to describe one problem.
>I have domain @test.com. I set in my virtual alias ( according to 
>http://www.postfix.org/VIRTUAL_README.html ) in my virtual table( or 
>file, it doesn't matter )
>test@test.com         test  , and in my alias is
>
>test             "| /usr/local/majordomo/wrapper resend -l test
>test-list"
>test-list        :include:/usr/local/majordomo/lists/test
>
>But spammers sent an email directly to test-list@mail.test.com and it 
>means, postfix looked directly to alias table ( not virtual table ) I 
>tried to use in my virtual table this;
>test-list@mail.test.com   error:nouser User unknown,  and it works for
>the message to test-list@mail.test.com, but it doesn't work for correct

>mailing list test@test.com, cause when test@mail.test.com pass message 
>to test-list ( postfix looks again to the virtual table ) and send 
>message not to :include:/usr/local/majordomo/lists/test but to 
>error:nouser User unknown

Did you add an entry in virtusertable for test@mail.test.com?

I might try:
test@mail.test.com              test
just to see if that fixes it....

But that' s just me.  Someone else who knows more about postfix and
majordomo might know better...

>-----Original Message-----
>From: majordomo-users-owner@greatcircle.com
>[mailto:majordomo-users-owner@greatcircle.com] On Behalf Of Ed Kasky
>Sent: Thursday, April 27, 2006 7:47 PM
>To: Jevos, Peter
>Cc: majordomo-users@greatcircle.com
>Subject: Re: Problem with aliases
>
>At 09:23 AM Thursday, 4/27/2006, you wrote -=>
>
> >Hello
> >I'd like to ask you if my aliases are correct cause I have one
problem:
> >
> >owner-test      a@a.com
> >test             "| /usr/local/majordomo/wrapper resend -l test
>test-list"
>
>For security purposes (I think) you should add nobody to the end of 
>this
>line:
>/usr/local/majordomo/wrapper resend -l test test-list,nobody
>
> >test-request    "|/usr/local/majordomo/wrapper request-answer test"
> >test-approval    a@a.com
> >test-list        :include:/usr/local/majordomo/lists/test
> >
> >In my test.config is : restrict_post=access, where access file 
> >contains
>
> >users can send to address test@test.com. But when I send email to 
> >address test-list@test.com, restrict post parameter doesn't work.
>
>This is a known issue and as a fix, add the following to your 
>virtusertable and rebuild the db:
>test-list@test.com              error:nouser User unknown
>
>This will prevent unauthorized posting to the list.
>
>I am assuming that postfix works the same as sendmail in this respect.
>Maybe someone can correct me if I'm worn...

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (400 of 1049):
Anything is possible on paper.
                 -- Ron McAfee


Indexed By Date Previous: Re: Problem with aliases
From: Ed Kasky <ed@esson.net>
Next: Re: how can I unsubscribe form maillinglist?
From: Daniel Liston <dliston@sonny.org>
Indexed By Thread Previous: Re: how can I unsubscribe form maillinglist?
From: Daniel Liston <dliston@sonny.org>
Next: Indigestion
From: Joe Hartley <jh@brainiac.com>

Google
 
Search Internet Search www.greatcircle.com