Re: [LUG] sendmail rejects

[mike <mike@xxxxxxxxxxxxx>]

On 08/07/04 17:47:14, alan wrote:
> On 2004.07.08 09:41 mike wrote:
> > G'day all,
> >
> > I have the following...
> >
> > inet
> > |
> > |
> > firewall--dmz
> > |
> > |
> > smtp
> >
> >
> > email comes in and is routed to my dmz sendmail which does spam   
> > blocking etc, once it gets through there it's forwarded to my email  
> > on  smtp (which does a load of stuff other than email).
> >
> > The issue is that if someone sends an email to either a user that  
> > does  not exist on smtp or trys the relay mail it bounces.
> >
> > The smtp in the dmz just forwards everything using the smarthost   
> > feature in sendmail to smtp.
> > smtp bounces it back to dmz with either user known or relaying  
> > denied.
> > I then have to go and delete the stuff from dmz every so often. I   
> > suppose I could just .forward the email to /dev/null, but there must  
> > be  a better solution.
>
> Hi Mike,
>
> I would have the non-existant users go to /dev/null but there isn't  
> much you can do about the relay bounces. In my experience (currently  
> 4 web/mail servers ) most mail thats trying for relay is spam with a  
> spoofed header, so you end up with exactly the same amount of  
> Postmaster Notify messages as you are getting bad relays.
>
> Can't you block port 25 for every one except your required ip(s) ?
Thanks for the info.
I run my own smtp server so it needs to accept all IP's :-( (in the  
dmz)
The one behine the firewall only accepts from the dmz but the dmz one  
does a bit of checking, rejects what it can and 'smarthosts' the rest.

I wonder how I can /dev/null the bounces and non-existant users?

You are right though, most of the stuff is just spam.

--
'ooroo

Mike...(:)-)
---------------------------------------------------
Email: mike@xxxxxxxxxxxxx        o
You need only two tools.        o /////
A hammer and duct tape. If it    /@   `\  /) ~
doesn't move and it should use  >  (O)  X<  ~  Fish!!
the hammer. If it moves and      `\___/'  \) ~
shouldn't, use the tape.           \\\
---------------------------------------------------


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.