RE: Sendmail whitelists

I use Postfix with Mailscanner (www.mailscanner.info) Spamassassin,
rulesdujour, clamav. Not to hard to setup especially on a Gentoo box,
delivering mail for 3 doamins.

Before this setup my predecessor only had a BSD box with Postfix and
rudimentary spamassassin setup. Some of my users were averaging between 50
to 100 spams a day, and viruses were sneaking every which way even with AV
software on the exchange server. 

Since my new setup, users now average 1 or 2 spams a day with 0 viruses
getting in. Postfix is the way into the light my friend :)

Cheers,
Eric



-----Original Message-----
From: Brian Collins [mailto:[email protected]] 
Sent: Tuesday, August 24, 2004 3:04 AM
To: Intrusions List (GCIA Practicals)
Subject: Re: [Intrusions] Sendmail whitelists

On Thu, 2004-07-01 at 11:11, Robert Wagner wrote:
> I was wondering if anyone has come up with a good method for creating a
> whitelist on a sendmail gateway?  
> 
> -Background:  I have been running sendmail successfully for a while.  I am
> interested in
>  locking down a mail gateway a bit further.  Currently, mail comes in from
>  the outside, through a gateway, then on to a final mailserver.  The
problem
>  is with spam, since the gateway just looks at the domain and then relays
>  (access file) the mail inside.  If the user doesn't exist, the internal
>  server then tries to return the mail.
>  
>  I would like to create a whitelist of known email addresses, so only they
>  get passed through.  Bad email addresses are stopped/rejected at the
>  gateway.  I see how to reject bad addresses, but there are an unlimited
>  amount of these.
>  
>  The problem is the relay command in the access file only works for the
>  entire domain.  Is there a simple method for doing this?
> 
> Someone mentioned:  define(`_RELAY_FULL_ADDR_', `1')
> But I cannot find any information on where this will work and what exactly
> it does.

Have you considered switching to Postfix?  It does it fairly easily.


-- 
Brian Collins <[email protected]>

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions
_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions