After a new install of Mandrake 8.1 (and rpmdrake update for postfix), I
checked the default status of postfix for open relay issues. Unless I'm
badly mistaken, the default config allows open relay (I tried two
different checks).

Of course, I know this can be remedied with config changes, but I am a
little surprised that this is the default configuration. I'm unaware of
any user-chosen step in the install that would have affected this.

A search of Usenet archives reveals several posts where the postfix author
indicates postfix being secure in this regard at versions much further back
than the one on Mandrake 8.1.

Am I mistaken that the relay is open in the default configuration, or is
this the intended default configuration?

Thanks.

---
  2.4.8-26mdk #1 Sun Sep 23 17:06:39 CEST 2001 i686 unknown
mail_version = Postfix-20010228-pl03
/usr/sbin/postconf -n
alias_maps = hash:/etc/postfix/aliases
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
default_privs = nobody
delay_warning_time = 4
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail -Y -a $DOMAIN
queue_directory = /var/spool/postfix
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version) (Mandrake Linux)
For help, email discuss-helpmandrakesecure.net; to unsubscribe send a
message to discuss-unsubscribemandrakesecure.net.  To visit MandrakeSecure,
go to http://www.mandrakesecure.net/.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]