Re: Secure zmailer/smtpserver anyone?

[mea@nic.funet.fi]

> VERB DOES do ALOT under zmailer.
> EXCERPT: (My input to the SMTPSERVER is marked with *******)
> 
> *******mconnect localhost
> connecting to host localhost (127.0.0.1), port 25
> connection open
> 220 localhost ZMailer Server 2.99.49p8 #1 ESMTP+IDENT ready at Mon, 12 Jan 1998 13:57:56 -0700

	Yes, but to have these of potentially harmfull things active with
	2.99.49p9 you need following three PARAMs at $MAILSHARE/smtpserver.conf

		PARAM debugcmd
		PARAM expncmd
		PARAM vrfycmd

	There is another PARAM which I think you should consider using:

		PARAM help line-of-help-text

220 nic.funet.fi ZMailer Server 2.99.49p9s4 #6 ESMTP+IDENT ready at Tue, 13 Jan
1998 01:40:50 +0200
verb
250-2.0.0 ZMailer SMTP server 2.99.49p9s4 #6: Sun Nov 30 21:43:15 EET 1997
250-2.0.0 Copyright 1990 Rayan S. Zachariassen
250 2.0.0 Copyright 1991-1997 Matti Aarnio
vrfy mea
550 5.5.2 Unknown command 'vrfy mea'
expn mea
550 5.5.2 Unknown command 'expn mea'
debug mea
550 5.5.2 Unknown command 'debug mea'
help
214-Copyright 1990 Rayan S. Zachariassen
214-Copyright 1991-1997 Matti Aarnio
214-
214--------------------------------------------------------------
214- This mail-server is at FUNET archive server nic.funet.fi
214-
214- Questions regarding our email service should be sent via
214- email to address  <postmaster@nic.funet.fi>
214- Reports about abuse are to be sent to: <abuse@nic.funet.fi>
214--------------------------------------------------------------
214-
214-The following commands are recognized:
214-    EHLO, HELO, MAIL, RCPT, DATA, BDAT, RSET, VRFY, EXPN, HELP, NOOP
214-    QUIT, ETRN, TURNME, VERB, ONEX, SEND, SOML, SAML, TURN, TICK, EMAL
214-    ESND, ESOM, ESAM, EVFY, IDENT, DEBUG
214-
214-The normal sequence is: EHLO/HELO (MAIL RCPT+ DATA)+ QUIT.
214-
214-This mailer will always accept 8-bit and binary message data
214-though you are better to use MIME format!
214-
214-For local information contact: postmaster@nic.funet.fi
214 SMTP server comments and bug reports to: <zmhacks@nic.funet.fi>


	I agree that in principle it should not list VRFY/EXPN/DEBUG
	at the command listings either, but I was a bit lazy and
	implemented only command recognition to discard it.

	Once I get back to ZMailer hacking, I intend to allow email
	to be sent to the postmaster even though the sender system
	is rejected categorically (known spam-haven).

	Well, this relates to Arnt Gulbradsen's case of wanting to
	allow incoming messages to serviced domain A to flow thru
	unhindered, while messages to anywhere else are SPAM blocked.
	Problems surface when there are recipients for both type of
	treatments.  Can I split the message at the input stages ?

/Matti Aarnio <mea@nic.funet.fi>