Re: Problem with aliases

 
Thanks for your answer Ed,

What is the effect when I add nobody to the end of the alias line as you
suggest bellow ?

I use postfix with virtual users stored in mysql. Only majordomo aliases
are stored in local alias table. I cannot use virtusertable.I forgot to
describe one problem.
I have domain @test.com. I set in my virtual alias ( according to
http://www.postfix.org/VIRTUAL_README.html ) in my virtual table( or
file, it doesn't matter )
[email protected]         test  , and in my alias is

test             "| /usr/local/majordomo/wrapper resend -l test
test-list"
test-list        :include:/usr/local/majordomo/lists/test

But spammers sent an email directly to [email protected] and it
means, postfix looked directly to alias table ( not virtual table )
I tried to use in my virtual table this;
[email protected]   error:nouser User unknown,  and it works for
the message to [email protected], but it doesn't work for correct
mailing list [email protected], cause when 
[email protected] pass message to test-list ( postfix looks again to
the virtual table ) and send message not to
:include:/usr/local/majordomo/lists/test but to error:nouser User
unknown

Thanks for an advices

BR

Pet

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Ed Kasky
Sent: Thursday, April 27, 2006 7:47 PM
To: Jevos, Peter
Cc: [email protected]
Subject: Re: Problem with aliases

At 09:23 AM Thursday, 4/27/2006, you wrote -=>

>Hello
>I'd like to ask you if my aliases are correct cause I have one problem:
>
>owner-test      [email protected]
>test             "| /usr/local/majordomo/wrapper resend -l test
test-list"

For security purposes (I think) you should add nobody to the end of this
line:
/usr/local/majordomo/wrapper resend -l test test-list,nobody

>test-request    "|/usr/local/majordomo/wrapper request-answer test"
>test-approval    [email protected]
>test-list        :include:/usr/local/majordomo/lists/test
>
>In my test.config is : restrict_post=access, where access file contains

>users can send to address [email protected]. But when I send email to 
>address [email protected], restrict post parameter doesn't work.

This is a known issue and as a fix, add the following to your
virtusertable and rebuild the db:
[email protected]              error:nouser User unknown

This will prevent unauthorized posting to the list.

I am assuming that postfix works the same as sendmail in this respect.
Maybe someone can correct me if I'm worn...

Ed Kasky
~~~~~~~~~
Randomly Generated Quote (390 of 503):
No wonder nobody comes here--it's too crowded. -Yogi Berra