请教高手，QMAIL的问题，如何让QMAIL不能发test%test.com的信!

eamon

我在网上找了很多资料，都没有说到这方面的东西，我已经加了SMTP认证的，在OPEN RELAY TEST的时候，发现有一种情况是可以发信的，就是RCPT TO：test%test.com的时候，他会成功送出!!晕。percenthack的文件是不存在的。但他还是发了出去，有谁知道这方面的问题，请告知，谢谢
http://linux.slcatv.com.cn/linuxbbs/

artxing

我发现有一部分人经常会出现这个问题.但是安装方法是没错的.

但我安装过很多次都没有这个问题.

所以我也不知道该怎么解决.

eamon

啊，不是吧!难到是我们的包有问题，安装方法应该不存在问题。真是难搞呀。

qujidong

no.1

eamon

我是不是开了VIRTUREDOMAIN。那个PERCENTHACK就不起作用了吗？？真是的，当我发到test%test.com的时候，实际上是发给：test%test.com@mydomain.com!我看到他是这样做的。当然这信是不能发出去了，但在OPEN　RELAY　TEST的时候，老是显示OK。。气死了。我们公司进了外国佬的SPAM　LIST。写信给他们，他们又说我们还是OPEN　RELAY。就是用http://members.iinet.net.au/~remmie/relay/测试的。谁帮帮我啊！！

prodou

我是不是开了VIRTUREDOMAIN。那个PERCENTHACK就不起作用了吗？？真是的，当我发到test%test.com的时候，实际上是发给：test%test.com@mydomain.com!我看到他是这样做的。当然这信是不能发出去了，但在OPEN　RELAY　TEST的时候，老是显示OK。。气死了。我们公司进了外国佬的SPAM　LIST。写信给他们，他们又说我们还是OPEN　RELAY。就是用http://members.iinet.net.au/~remmie/relay/测试的。谁帮帮我啊！！

关注、关注，进了SPAM LIST可就不好玩了

eamon

找了一天的时间，终于找到了一个SMTP的PATCH。我安装后没事了。
--- orig/qmail-smtpd.c  Mon Jun 15 06:53:16 1998
+++ qmail-smtpd.c       Sat Feb  9 12:07:19 2002
@@ -53,6 +53,7 @@
void err_nogateway() { out("553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)\r\n"; }
void err_unimpl() { out("502 unimplemented (#5.5.1)\r\n"; }
void err_syntax() { out("555 syntax error (#5.5.4)\r\n"; }
+void err_relay() { out("553 we don't relay (#5.7.1)\r\n"; }
void err_wantmail() { out("503 MAIL first (#5.5.1)\r\n"; }
void err_wantrcpt() { out("503 RCPT first (#5.5.1)\r\n"; }
void err_noop() { out("250 ok\r\n"; }
@@ -216,6 +217,21 @@
   return r;
}

+int addrrelay()
+{
+  int j;
+  j = addr.len;
+  while(--j >;= 0)
+    if (addr.s[j] == '@') break;
+  if (j < 0) j = addr.len;
+  while(--j >;= 0) {
+    if (addr.s[j] == '@') return 1;
+    if (addr.s[j] == '%') return 1;
+    if (addr.s[j] == '!') return 1;
+  }
+  return 0;
+}
+

int seenmail = 0;
int flagbarf; /* defined if seenmail */
@@ -250,6 +266,7 @@
void smtp_rcpt(arg) char *arg; {
   if (!seenmail) { err_wantmail(); return; }
   if (!addrparse(arg)) { err_syntax(); return; }
+  if (addrrelay()) { err_relay(); return; }
   if (flagbarf) { err_bmf(); return; }
   if (relayclient) {
     --addr.len;
-------------------------------->;
http://linux.slcatv.com.cn/linuxbbs/

zz

我以前就是这样，装了补丁，open play还是关不了，最后用的是以前讨论的一个补丁，artxing——我忘了那个补丁叫什么了，装上就好了！artxing还记得吗？fgay（名字忘了）那个搞研发的！

eamon

惨呀，我现在搞好那个OPEN RELAY　但那个外国佬还是不让通过，说我的服务器不是RFC标准，晕啊。你们看看他回的邮件：
Subject: Re: Fw: MAPS RSS Remove Request: mydomain.com


>; We have our own tester and series of tests. No other organization performs
>; the tests that we do, and we cannot and do not rely on any relay test data
>; other then our own. While we appreciate that you have used other testers,
>; to be removed from the RSS your IP must test secure using our tester.
>;
>; We queued a re-test this evening. The results remain the same:
>;
>; Mon Dec 29 19:00:03 2003
>;
>; Connecting to mydomain.com ...
>; <<< 220 mydomain.com ESMTP
>; >;>;>; EHLO cygnus.mail-abuse.org
>; <<< 250-mydomain.com250-AUTH=LOGIN250-AUTH LOGIN250-PIPELINING250
>; 8BITMIME
>; >;>;>; AUTH LOGIN
>; <<< 334 VXNlcm5hbWU6
>; >;>;>; VXNlcm5hbWU6
>; <<< 334 UGFzc3dvcmQ6
>; >;>;>; UGFzc3dvcmQ6
>; <<< user invalid username:\n
>; >;>;>; RSET
>; <<< 535 auth failure
>; >;>;>;
>; >;>;>;
>; connection on port 25 was terminated
>;
>; Tested mydomain.com using mydomain.com
and [mydomain.com]
>; Banner: mydomain.com ESMTP
>; Accepted 0 of 0
>; test done
>;
>; mydomain.com test finished.
>;
>; There is nothing in the RFC's that states your mail server should
>; disconnect after an SMTP AUTH failure. We perform this check as we
>; discovered an SMTP AUTH bug and vulnerability earlier this year that was
>; allow spam to be relayed through otherwise secure servers.
>;
>; You need to review your configuration again, or contact your mail server
>; software vendor for support, and allow us to perform our tests. You should
>; also feel free to review the RFC's that deal with mail servers, their
>; behavior, and SMTP transactions at www.ietf.org.
>;
>; --
>; Susan Tait
>; MAPS LLC

eamon

我想问问你们，你们用telnet mydomain.com 25来测试的时候，当用户认证失败的时候会退出联接吗？？我的就是退出联接，鬼佬就说不行！！是不是我的qmail-smtpd.c有问题？SOS
----------------------------------------------
ehlo
250-mydomain.com
250-AUTH=LOGIN
250-AUTH LOGIN
250-PIPELINING
250 8BITMIME
auth login
334 VXNlcm5hbWU6
test
t334 UGFzc3dvcmQ6
test
user invalid 惦-
                535 auth failure


失去了跟主机的连接。
--------------------------------------------

COME ON!!!