Re: Securing Sendmail 8.11.6-23 from spammers

On Wed Mar 05 2003 at 11:25, gti617 wrote:

> When SMTP-AUTH code was active, relaying was impossible. Even the people in
> my group couldn't send or receive any messages.

That doesn't make sense... it should relay for anyone who already
meets RELAY conditions in /etc/mail/access (regardless of auth).
(Well this is what I have observed).

But for your situation, all you really need are the proper rules in
the access file.  (And you did run "make" in that directory after
you altered it, didn't you?)

> So I decided to take out the SMTP-AUTH filters.  Any body who knows and has
> it working so you can have secure sendmail platform.

If you want smtp AUTH, then you need to enable it in your .mc file
(and then create the sendmail.cf file from that).

You can do it via secure certificates, starttls, and/or with a
login.  Which usually means creating and distributing signed
certificates to your clients.  So if you don't know anything about
openssl, now it the time to learn.

Of course, you will also need to enable auth on the client side, but
even outrage excess can do that :)

There are a lot of web pages devoted to this subject at
http://www.sendmail.org/.  There is also information already on your
hard drive and a google search will also find you a lot more.

> If you have it working, please post the actual code. Or please direct to the
> proper web page.  Thanks -- Kevin

No, I'm not going to hold your hand... read the docs and learn (and
understand) how to do it yourself.

Cheers
Tony