[sclug] Disabling outgoing mail on postfix

Simon Huggins huggie at earth.li
Tue Nov 2 13:36:36 UTC 2004


On Tue, Nov 02, 2004 at 11:35:46AM +0000, Tim Sutton wrote:
> Yes I have it currently set to only allow outbound mail from
> localhost...the problem arose last time when someone found a loophole
> in nuke that allowed them to spam from  my server. So I want to
> prevent localhost from sending mail out from my server (delivery to
> local users is ok) so that I can monitor bandwidth useage and see if
> my server is being used for undesired purposes.

You'll want to disable local submission via e.g. /usr/lib/sendmail too
as there's no reason they can't call that from nuke.

In fact why don't you run nuke in php safe_mode with an undefined
safe_mode_exec_dir ?

This would help a bit at least.

I still think you probably need to configure your MTA to only deliver to
local users as well but I only really grok exim not postfix.

Simon.

-- 
UK based domain, email and web hosting ***/   "Ah, here we are - `How to /*
http://www.blackcatnetworks.co.uk/     **/     Raise the Dead.'" - Bart /**
sales at blackcatnetworks.co.uk           */                      Simpson /***
Black Cat Networks                     /                              /****
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.tmdg.co.uk/pipermail/sclug/attachments/20041102/e1ed4d84/attachment.bin


More information about the Sclug mailing list