Marcus Schopen | 1 Dec 04:39

cyrus accepts mails for "unknown users"

Hi,

I've seen that simular questions have been discussed here, but I'm not sure if 
this problem is the same (sorry if yes and I just didn't get it):

I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody standard 
package) and cyrus 2.1.17 (backport from http://people.debian.org/~hmh/). 
Today I had a heavy spam attack caused by the fact, that sendmail accepts 
mails for non existing users. EMails to unknown accounts on local domains 
(local-host-names) will be accepted and than bounced. Is there a way to 
stop/reject these mails at "rcpt to: user unknown"-point?

Thanks,
Marcus

--

-- 

You know, some of these stories are pretty good.  I never knew mice
lived such interesting lives.

  -- Homer Simpson
     Itchy & Scratchy & Marge
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Antoine Jacoutot | 1 Dec 09:04
Favicon

Re: cyrus accepts mails for "unknown users"

On Wednesday 01 December 2004 04:42, you wrote:
> I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody
> standard package) and cyrus 2.1.17 (backport from
> http://people.debian.org/~hmh/). Today I had a heavy spam attack caused by
> the fact, that sendmail accepts mails for non existing users. EMails to
> unknown accounts on local domains (local-host-names) will be accepted and
> than bounced. Is there a way to stop/reject these mails at "rcpt to: user
> unknown"-point?

You can use virtusertable in sendmail.
ie:
user1 <at> domain.com user1
user2 <at> domain.com user2
user3 <at> domain.com user3
@domain.com error:5.1.1:550 User unknow

Or you can have a look at : "Real Time Cyrus Integration"
-> http://anfi.homeunix.net/sendmail/rtcyrus2.html

Antoine
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

lst_hoe01 | 1 Dec 09:27
Favicon

Re: cyrus accepts mails for "unknown users"

Zitat von Marcus Schopen <lists <at> localguru.de>:

> Hi,
>
> I've seen that simular questions have been discussed here, but I'm not sure
> if this problem is the same (sorry if yes and I just didn't get it):
>
> I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody standard
> package) and cyrus 2.1.17 (backport from http://people.debian.org/~hmh/).
> Today I had a heavy spam attack caused by the fact, that sendmail accepts
> mails for non existing users. EMails to unknown accounts on local domains
> (local-host-names) will be accepted and than bounced. Is there a way to
> stop/reject these mails at "rcpt to: user unknown"-point?

This is a sendmail question. Nothing Cyrus can do about. You have to make
sendmail aware which users are valid.

Regards

Andreas

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Andrzej Adam Filip | 1 Dec 11:57

Re: cyrus accepts mails for "unknown users"

Marcus Schopen wrote:
> I've seen that simular questions have been discussed here, but I'm not sure if 
> this problem is the same (sorry if yes and I just didn't get it):
> 
> I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody standard 
> package) and cyrus 2.1.17 (backport from http://people.debian.org/~hmh/). 
> Today I had a heavy spam attack caused by the fact, that sendmail accepts 
> mails for non existing users. EMails to unknown accounts on local domains 
> (local-host-names) will be accepted and than bounced. Is there a way to 
> stop/reject these mails at "rcpt to: user unknown"-point?

Take a look at http://anfi.homeunix.net/sendmail/rtcyrus2.html
<quote>
how to make sendmail check in real time presence of cyrus mailbox using socket 
map map (or fstat map) and FEATURE(`mrs'). It supports cyrus virtual domains
</quote>

--

-- 
Andrzej [en:Andrew] Adam Filip anfi <at> priv.onet.pl anfi <at> xl.wp.pl
Home Page http://anfi.homeunix.net/ [ PageRank 6 ]
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Marcus Schopen | 1 Dec 16:27

Re: cyrus accepts mails for "unknown users"

Hi,

On Wednesday 01 December 2004 11:57, Andrzej Adam Filip wrote:
> Marcus Schopen wrote:
> > I've seen that simular questions have been discussed here, but I'm not
> > sure if this problem is the same (sorry if yes and I just didn't get it):
> >
> > I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody
> > standard package) and cyrus 2.1.17 (backport from
> > http://people.debian.org/~hmh/). Today I had a heavy spam attack caused
> > by the fact, that sendmail accepts mails for non existing users. EMails
> > to unknown accounts on local domains (local-host-names) will be accepted
> > and than bounced. Is there a way to stop/reject these mails at "rcpt to:
> > user unknown"-point?
>
> Take a look at http://anfi.homeunix.net/sendmail/rtcyrus2.html
> <quote>
> how to make sendmail check in real time presence of cyrus mailbox using
> socket map map (or fstat map) and FEATURE(`mrs'). It supports cyrus virtual
> domains </quote>

Is there another way? There are no sendmail-8.13.x and Cyrus-2.2.x packages 
for Debian and I don't want to build all that stuff from source.

Thanks,
Marcus

--

-- 

The weak and nerdy are admired for their computer-programming abilities.
(Continue reading)

Mike Brodbelt | 2 Dec 15:18

Re: cyrus accepts mails for "unknown users"

Marcus Schopen wrote:

> Is there another way? There are no sendmail-8.13.x and Cyrus-2.2.x packages 
> for Debian and I don't want to build all that stuff from source.

I'm in the same situation as you. The options are basically:-

a) Upgrade to Cyrus 2.2 and sendmail 8.13 and use the socket map.

b) Use an old sendmail.cf hack where sendmail checks the existence of a
user by actually looking for the physical directory for the Cyrus inbox
on disk. Only works if sendmail and Cyrus are on the same box.

c) Maintain your own static map of valid users, and make it available to
sendmail via virtusertable or something similar.

d) Stick all your email accounts into LDAP, and backend both Cyrus and
sendmail off that.

The first option is a bit painful on Debian, as is basically requires
you to maintain your own sendmail and Cyrus packages separate to
mainstream. I've done this in the past (for Cyrus 2.0, which never had
official debs), and it's enough effort that these days I try to avoid
rolling local debs where possible (though I confess to still using my
own sendmail debs, as I'm not at all fond of the Debian ones). The
second and third options work, but each has fairly ugly points. I'm
moving towards using LDAP for everything, but haven't had time to sort
it all out yet.

Mike.
(Continue reading)

Andrzej Adam Filip | 1 Dec 13:09

Re: cyrus accepts mails for "unknown users"

Marcus Schopen wrote:
> I've seen that simular questions have been discussed here, but I'm not sure if 
> this problem is the same (sorry if yes and I just didn't get it):
> 
> I'm runnung sendmail 8.12.3 with cyrusv2 local mailer (Debian woody standard 
> package) and cyrus 2.1.17 (backport from http://people.debian.org/~hmh/). 
> Today I had a heavy spam attack caused by the fact, that sendmail accepts 
> mails for non existing users. EMails to unknown accounts on local domains 
> (local-host-names) will be accepted and than bounced. Is there a way to 
> stop/reject these mails at "rcpt to: user unknown"-point?

Take a look at http://anfi.homeunix.net/sendmail/rtcyrus2.html
<quote>
how to make sendmail check in real time presence of cyrus mailbox using socket
map map (or fstat map) and FEATURE(`mrs'). It supports cyrus virtual domains
</quote>

--

-- 
Andrzej [en:Andrew] Adam Filip anfi <at> priv.onet.pl anfi <at> xl.wp.pl
Home Page http://anfi.homeunix.net/ [ PageRank 6 ]

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html


Gmane