*BSD News Article 94363


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!news.unimelb.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!newsfeed.direct.ca!hunter.premier.net!feed1.news.erols.com!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!gatech!news-relay.ncren.net!newsgate.duke.edu!zombie.ncsc.mil!arlnews!nvl-times.nvl.army.mil!nvl.army.mil!not-for-mail
From: nichols@nvl.army.mil (Don Nichols)
Newsgroups: comp.unix.questions,comp.unix.misc,comp.unix.bsd.misc,comp.unix.bsd.bsdi.misc,comp.unix.admin,comp.security.unix,comp.security.misc
Subject: Re: Blocking domains that spam
Date: 24 Apr 1997 11:26:10 -0400
Organization: U.S. Army Night Vision & Electronic Sensors
Lines: 27
Message-ID: <5jnu2i$1al$1@izalco.nvl.army.mil>
References: <335eaf61.82196362@news.ioc.net>
Reply-To: nichols@nvl.army.mil
NNTP-Posting-Host: izalco.nvl.army.mil
Xref: euryale.cc.adfa.oz.au comp.unix.questions:98803 comp.unix.misc:28932 comp.unix.bsd.misc:3083 comp.unix.bsd.bsdi.misc:6744 comp.unix.admin:57339 comp.security.unix:33986 comp.security.misc:35462


In article <335eaf61.82196362@news.ioc.net>,  <ken@ioc.net> wrote:
>I am using BSDI v2.1, does anyone know how to block email from a
>specific domain?

	Well ... you've cross-posted this to several newsgroups, including a
couple of security ones (in one of which I'm reading and responding.)  I'll
leave the cross-post, since I'm not sure where you'll be reading things.

	Given that this is the comp.security.unix newsgroup (for me, at
least), *my* suggestion is to abandon sendmail entirely, install qmail
(which is *much* more secure, and which has a smtp receipt module which can
be started very quickly, so it can be run from inet.conf).  Now, since it
can be run from inetd.conf, it can be tcp-wrapped.  Tcp-wrapping can allow
quite a bit of control over who is allowed to connect, and who is not.

	Also, qmail has a fairly easy configuration to make it reject
attempts to relay mail through your system, so as to bypass blocks that
others have against their own systems.

	Good luck,
		DoN.

-- 
DoN Nichols  work:nichols@nvl.army.mil (703)704-2280
Disclaimer: No statements herein are to be considered as necessarily
representing the opinions of the Department of the Army or Night Vision Labs.
    Black holes are where GOD is dividing by zero -- (author unknown)