RE: Secure zmailer/smtpserver anyone?

["Paquette, Trevor" <TrevorPaquette@mcc.net>]

Will this also work for the VERB command?


> -----Original Message-----
> From:	mea@nic.funet.fi [SMTP:mea@nic.funet.fi]
> Sent:	Monday, January 12, 1998 4:52 PM
> To:	TrevorPaquette@mcc.net
> Cc:	tom@sdf.com; zmailer@nic.funet.fi
> Subject:	Re: Secure zmailer/smtpserver anyone?
> 
> > VERB DOES do ALOT under zmailer.
> > EXCERPT: (My input to the SMTPSERVER is marked with *******)
> > 
> > *******mconnect localhost
> > connecting to host localhost (127.0.0.1), port 25
> > connection open
> > 220 localhost ZMailer Server 2.99.49p8 #1 ESMTP+IDENT ready at Mon,
> 12 Jan 1998 13:57:56 -0700
> 
> 	Yes, but to have these of potentially harmfull things active
> with
> 	2.99.49p9 you need following three PARAMs at
> $MAILSHARE/smtpserver.conf
> 
> 		PARAM debugcmd
> 		PARAM expncmd
> 		PARAM vrfycmd
> 
> 	There is another PARAM which I think you should consider using:
> 
> 		PARAM help line-of-help-text
> 
> 220 nic.funet.fi ZMailer Server 2.99.49p9s4 #6 ESMTP+IDENT ready at
> Tue, 13 Jan
> 1998 01:40:50 +0200
> verb
> 250-2.0.0 ZMailer SMTP server 2.99.49p9s4 #6: Sun Nov 30 21:43:15 EET
> 1997
> 250-2.0.0 Copyright 1990 Rayan S. Zachariassen
> 250 2.0.0 Copyright 1991-1997 Matti Aarnio
> vrfy mea
> 550 5.5.2 Unknown command 'vrfy mea'
> expn mea
> 550 5.5.2 Unknown command 'expn mea'
> debug mea
> 550 5.5.2 Unknown command 'debug mea'
> help
> 214-Copyright 1990 Rayan S. Zachariassen
> 214-Copyright 1991-1997 Matti Aarnio
> 214-
> 214--------------------------------------------------------------
> 214- This mail-server is at FUNET archive server nic.funet.fi
> 214-
> 214- Questions regarding our email service should be sent via
> 214- email to address  <postmaster@nic.funet.fi>
> 214- Reports about abuse are to be sent to: <abuse@nic.funet.fi>
> 214--------------------------------------------------------------
> 214-
> 214-The following commands are recognized:
> 214-    EHLO, HELO, MAIL, RCPT, DATA, BDAT, RSET, VRFY, EXPN, HELP,
> NOOP
> 214-    QUIT, ETRN, TURNME, VERB, ONEX, SEND, SOML, SAML, TURN, TICK,
> EMAL
> 214-    ESND, ESOM, ESAM, EVFY, IDENT, DEBUG
> 214-
> 214-The normal sequence is: EHLO/HELO (MAIL RCPT+ DATA)+ QUIT.
> 214-
> 214-This mailer will always accept 8-bit and binary message data
> 214-though you are better to use MIME format!
> 214-
> 214-For local information contact: postmaster@nic.funet.fi
> 214 SMTP server comments and bug reports to: <zmhacks@nic.funet.fi>
> 
> 
> 	I agree that in principle it should not list VRFY/EXPN/DEBUG
> 	at the command listings either, but I was a bit lazy and
> 	implemented only command recognition to discard it.
> 
> 	Once I get back to ZMailer hacking, I intend to allow email
> 	to be sent to the postmaster even though the sender system
> 	is rejected categorically (known spam-haven).
> 
> 	Well, this relates to Arnt Gulbradsen's case of wanting to
> 	allow incoming messages to serviced domain A to flow thru
> 	unhindered, while messages to anywhere else are SPAM blocked.
> 	Problems surface when there are recipients for both type of
> 	treatments.  Can I split the message at the input stages ?
> 
> /Matti Aarnio <mea@nic.funet.fi>