You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by Carl <mu...@altern.org> on 2003/11/19 02:56:45 UTC
Configuring James to avoid spam open-relay
Hi,
I use James to serve 2 domains. The email clients doesn't use the James
SMTP server directly but rather their own ISP smtp.
I use the out of the box James 2.1.3 confi.xml (with very little change)
and looking at the spool, I see that some people use my server as an
open relay to spam. (more than 1000 emails a day in the spool). As some
of many of spammed victim's email are wrong, James send a new mail to
inform the spam sender witch ,of course, use a fake email, so James
isn't able to deliver correctly the notification, and finally the mail
is marked as error.
Is there a way to configure it to reject mails that are not for my 2
domains without loosing the email notification to sender on the error
processor ?
I've thought about an mailet/matcher at the root prcessor's begining,
but as far as I red the docs, all mails first goes to the root
processor, even the error notification...
Any help greatly appreciate,
Carl
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: Configuring James to avoid spam open-relay
Posted by "Noel J. Bergman" <no...@devtech.com>.
> I've still not found how to allow delivering mails only for
> local accounts and for external address for mails generated
> during the root processor.
Hence the 127.0.0.1.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Configuring James to avoid spam open-relay
Posted by Carl <mu...@altern.org>.
Thanks for your response, I'm still looking on he docs but still get
lost. I'm sorry it's seems to be a very simple questionn I feel stupid
to bother you...
Sure that all incoming mails are for local consumption, but for things
like email noitifications or redirect to an external email, the
transport processor have to deliver emails not only localy. So I've
still not ound how to allow delivering mails only for local accounts and
for external address for mails generated during the root processor.
Any kind of help still greatly appreciate.
Carl
Noel J. Bergman wrote:
>>for the RemoteAddrNotInNetwork=127.0.0.1, if I enable this, many
>>of good emails will be dropped : the users use their own ISP smtp
>>server and not the james one...
>
>
> If users use their ISP smtp server, then the only e-mail impacting James
> will be mail intended for local consumption. The RemoteAddrNotInNetwork
> filtering is to prevent relaying, not local delivery, if you look closely at
> where it sits in the pipeline.
>
> --- Noel
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: Configuring James to avoid spam open-relay
Posted by "Noel J. Bergman" <no...@devtech.com>.
> for the RemoteAddrNotInNetwork=127.0.0.1, if I enable this, many
> of good emails will be dropped : the users use their own ISP smtp
> server and not the james one...
If users use their ISP smtp server, then the only e-mail impacting James
will be mail intended for local consumption. The RemoteAddrNotInNetwork
filtering is to prevent relaying, not local delivery, if you look closely at
where it sits in the pipeline.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Configuring James to avoid spam open-relay
Posted by Carl <mu...@altern.org>.
Thanks for your reply.
I will try the <authRequired>true</authRequired>, but for the
RemoteAddrNotInNetwork=127.0.0.1, if I enable this, many of good emails
will be dropped : the users use their own ISP smtp server and not the
james one...
Carl
Fox Sterling wrote:
> Look in the smtpserver block. There is a <authRequired> (by default
> commented out):
> <authRequired>true</authRequired>
>
> This will require the sender to authenticate before your server will relay
> emails. Local emails still delivered without authentication.
>
> May also wish to comment out the following mailet with authentication on:
> <mailet match="RemoteAddrNotInNetwork=127.0.0.1" class="ToProcessor">
> <processor>spam</processor>
> </mailet>
>
> This mailet will prevent people sending from outside your network to relay
> through the server. The first will prevent mail from reaching the spool,
> the second will check once in spool.
>
> ----- Original Message -----
> From: "Carl" <mu...@altern.org>
> To: "James Users List" <se...@james.apache.org>
> Sent: Tuesday, November 18, 2003 7:56 PM
> Subject: Configuring James to avoid spam open-relay
>
>
>
>>Hi,
>>
>>I use James to serve 2 domains. The email clients doesn't use the James
>>SMTP server directly but rather their own ISP smtp.
>>
>>I use the out of the box James 2.1.3 confi.xml (with very little change)
>>and looking at the spool, I see that some people use my server as an
>>open relay to spam. (more than 1000 emails a day in the spool). As some
>>of many of spammed victim's email are wrong, James send a new mail to
>>inform the spam sender witch ,of course, use a fake email, so James
>>isn't able to deliver correctly the notification, and finally the mail
>>is marked as error.
>>
>>Is there a way to configure it to reject mails that are not for my 2
>>domains without loosing the email notification to sender on the error
>>processor ?
>>
>>I've thought about an mailet/matcher at the root prcessor's begining,
>>but as far as I red the docs, all mails first goes to the root
>>processor, even the error notification...
>>
>>Any help greatly appreciate,
>>
>>
>>Carl
>>
>>
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
>>For additional commands, e-mail: server-user-help@james.apache.org
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
Re: Configuring James to avoid spam open-relay
Posted by Fox Sterling <vi...@hotmail.com>.
Look in the smtpserver block. There is a <authRequired> (by default
commented out):
<authRequired>true</authRequired>
This will require the sender to authenticate before your server will relay
emails. Local emails still delivered without authentication.
May also wish to comment out the following mailet with authentication on:
<mailet match="RemoteAddrNotInNetwork=127.0.0.1" class="ToProcessor">
<processor>spam</processor>
</mailet>
This mailet will prevent people sending from outside your network to relay
through the server. The first will prevent mail from reaching the spool,
the second will check once in spool.
----- Original Message -----
From: "Carl" <mu...@altern.org>
To: "James Users List" <se...@james.apache.org>
Sent: Tuesday, November 18, 2003 7:56 PM
Subject: Configuring James to avoid spam open-relay
> Hi,
>
> I use James to serve 2 domains. The email clients doesn't use the James
> SMTP server directly but rather their own ISP smtp.
>
> I use the out of the box James 2.1.3 confi.xml (with very little change)
> and looking at the spool, I see that some people use my server as an
> open relay to spam. (more than 1000 emails a day in the spool). As some
> of many of spammed victim's email are wrong, James send a new mail to
> inform the spam sender witch ,of course, use a fake email, so James
> isn't able to deliver correctly the notification, and finally the mail
> is marked as error.
>
> Is there a way to configure it to reject mails that are not for my 2
> domains without loosing the email notification to sender on the error
> processor ?
>
> I've thought about an mailet/matcher at the root prcessor's begining,
> but as far as I red the docs, all mails first goes to the root
> processor, even the error notification...
>
> Any help greatly appreciate,
>
>
> Carl
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org
RE: Configuring James to avoid spam open-relay
Posted by "Noel J. Bergman" <no...@devtech.com>.
> I use James to serve 2 domains. The email clients doesn't
> use the James SMTP server directly but rather their own
> ISP smtp.
> Is there a way to configure it to reject mails that are not
> for my 2 domains without loosing the email notification to
> sender on the error processor ?
If you configure SMTP AUTH, then no one will be able to relay e-mail without
a password. Which you won't provide. :-) Non-local mail will be rejected
in the protocol handler, rather than in the pipeline. Local mail will be
accepted. In the v2.2 test build there are some other options.
--- Noel
---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org