OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Preventing email abuse
From: Rask Ingemann Lambertsen (rask-postfixkampsax.k-net.dk)
Date: Sun Jun 25 2000 - 12:52:10 CDT

Den 20-Jun-00 00:27:33 skrev Wietse Venema fĝlgende om "Re: Preventing email abuse":
>Marco d'Itri:

>> Except if you have a cable modem. Then you will relay for most (if not
>> all) cable modem users in the world, because they are assigned IPs in
>> the 24.0.0.0/8 netblock.

>So, what smart solution do you recommend?

   To not have a default (or empty default) setting for my_networks.
Postfix should require explicit configuration of this parameter and
complain loudly if it isn't configured, referring to a part of the
documentation which explains how to set it up properly. Maybe you can allow
127.0.0.1/8 to relay by default, but that's about it. The risk of opening
up relaying to unintended networks is too big. Of course by now, you have
the problem of backwards compatibility.

Regards,

/ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻTŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ\
| Rask Ingemann Lambertsen | E-mail: mailto:raskkampsax.k-net.dk |
| Registered Phase5 developer | WWW: http://www.gbar.dtu.dk/~c948374/ |
| A4000, 896 kkeys/s (RC5-64) | "ThrustMe" on XPilot, ARCnet and IRC |
| Never underestimate the bandwidth of a CD-ROM flying through the lab. |