Re: lug-bg: SMTP AUTH problem

["Nikolay Bogdanov Toshev" <niki@xxxxxx>]

Uvi - makar i da e logichno tova ne e problema.
Mahnah serverami.com ot v /etc/mail/local-host-names, no
otnovo niamashe problem da se konektna kam port 25-ti i da se predstavia
kato spammer@xxxxxxxxxxxxx i da pusna pismo do men@xxxxxxxxxxxxx.
Iavno ima i oshte prepani kamacheta, koito si varshat dobre kovarnata
rabota.

Izprashtam poslednite redove ot maillog-a ako moje da pomogne:

Aug  6 10:02:32 serverami sendmail[16598]: h7672CK16598:
from=spammer@xxxxxxxxxxxxx, size=20, class=0, nrcpts=1,
msgid=<200308060702.h7672CK16598@xxxxxxxxxxxxx>, proto=ESMTP, daemon=MTA,
relay=c85-125.icp.com [215.133.83.123] (may be forged)
Aug  6 10:02:32 serverami.com sendmail[16614]: h7672CK16598:
to=niki@xxxxxxxxxxxxx, delay=00:00:07, xdelay=00:00:00, mailer=local,
pri=30029, dsn=2.0.0, stat=Sent
[root@serverami sasl]#




----- Original Message -----
From: "Vesselin Kolev" <vlk@xxxxxxxxxxxxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Tuesday, August 05, 2003 5:47 PM
Subject: Re: lug-bg: SMTP AUTH problem


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Az ne bih se uchudval na tova:)
>
> Ako v /etc/mail/local-host-names imash red
>
> serverami.com
>
> e logichno vseki da mozhe da prati mail do user, koito ima kutia v ramkite
> na domaina serverami.com bez da e nuzhno da pravi
> authentikacia. Authentikaciata sluzhi SAMO za da davash na nikoi
> pravo da sledva RELAY politikata na SMTP servera ti. Ako izvyrshvash
> localna dostavka ne e nuzhno.
>
> Vtorata chast na problema sa mail-clientite. Tozi problem go ima ne samo
> Outlook Express. Prichinata e pyrvo, che ti si go nastroil da pravi
> authentikacia pri prashtane na mail prez tvoia SMTP server i clients
poslushno
> si sledva tova. Kogato konktaktuva s SMTP servera toi podava AUTH string
> i zapochva obmena... e ako ne e viarno imeto i parolata naistina niama da
> ima izprashtane, no ne zashtoto shte imash zabrana za relay, a zashtoto
> prosto sesiata shte se othvyrli poradi greshno ime e parola.. Zabelezhi
edna
> vazhna osobenost. Pyrvo se pravi authentikacia, a sled tova se izprashta
> maila, v koito pishe, che e za user ot domaina serverami.com. Napravi
> spravka v syotv. RFC-ta po temata. T.e. pri teb sesiata se provalia oshte
> predi da si kazal, che shte prashtash mail za localen user:)))
>
> Taka, che niama problemi:) Tova e relanoto polozhenie ne neshtata.
>
> Taka i taka stana vypros za authentikacia i za problemi... bih ti
preporychal
> da opitash vse pak da pusnesh STARTTLS opciite na Sendmail i da
> pravish authentikaciata na baza validen sertifikat. Inache authentikaciata
> s parolka i username e dosta lesno vzlomiaema.
>
> Ako iskash procheti http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail
>
> Ta po povod na Outlook Express se seshtam neshto drugo:) Tozi client
> v neobiatnata si mnogofunkcionalnost ne znae za TLS (kazvat, che imalo
> patch, no mai nikoi ne go slaga). Shte ti se nalozhi kato pusnesh TLS-a
> supporta da razreshish i SMTPS porta, zashtoto Outlook kakto kazah ne
> znae kakvo e tova TLS kakto i mnogo MS prilozhenia (zashto?).
>
> Fakticheski brykvash v m4 prototipa na Sendmail i pishesh:
>
> dnl # The following causes sendmail to additionally listen to port 465,
but
> dnl # starting immediately in TLS mode upon connecting. Port 25 or 587
> followed
> dnl # by STARTTLS is preferred, but roaming clients using Outlook Express
> can't
> dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use
STARTTLS
> dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses
smtps
> dnl # when SSL is enabled-- STARTTLS support is available in version
1.1.1.
> dnl #
> dnl # For this to work your OpenSSL certificates must be configured.
> dnl #
> dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
>
>   Pozdravi
>     Vesselin Kolev
>
> On Tuesday 05 Aug 2003 15:53, Nikolay Bogdanov Toshev wrote:
> > Moje li malko Sendmail AUTH help?
> > imam edin server, koito e s nastroen SMTP AUTH, obache:
> > kogato niakoi se varje po telnet serverami.com 25
> > savsem spokojno moje da pusne pismo primeno ot admin@xxxxxxxxxxxxx do
> > men@xxxxxxxxxxxxx.
> >
> > Inache ot Outlook-Expressa primerno ako ne ukajesh istinsko ime i parola
i
> > che Outgoinga ne ti iska authentikacia ne mojesh da pratish pismo -
toest
> > tam SMTP AUTH-a si raboti kato horata.
> > kakav moje da e problema mi?
> >
> >
> >
> >
===========================================================================
> >= A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> > http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
> > Zagora To unsubscribe:
http://www.linux-bulgaria.org/public/mail_list.html
> >
===========================================================================
> >=
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.7 (GNU/Linux)
>
> iD8DBQE/L8OQ+48lZPXaa+MRArTNAJ9Tw1jYGJw1LwiCBQ7iTfn5/ry7ZwCg6zZK
> clru93op60/37WA0P0DspCQ=
> =t77o
> -----END PGP SIGNATURE-----
>
>
============================================================================
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
> http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara
Zagora
> To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
>
============================================================================

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================