sendmail 8.8.6 spam rule ..

[someone_4]

Hey everyone .
eartlinx has blocked me because they say i am an open relay. I have already fixed this before but there is one combo that is getting by me.I am on 8.8.6 I cant upgrade so I have to work with that I have here. Would anyone have a ruleset to block from splatter%io.com@ ?

Here is the last fix i put in and it worked but seems like I need one more rule.

Scheck_rcpt
# first: get client addr
R$+ $: $(dequote "" $&{client_addr} $) $| $1
R0 $| $* $@ ok no client addr: directly invoked
R$={LocalIP}$* $| $* $@ ok from here
# not local, check rcpt
R$* $| $* $: $>3 $2
# remove local part, maybe repeatedly
R$+ $:$>removelocal $1
# still something left?
R$*<@$+>$* $#error $@ 5.7.1 $: 550 we do not relay

Sremovelocal
# remove RelayTo part (maybe repeatedly)
R$*<@$*$={RelayTo}.>$* $>3 $1 $4
R$*<@$=w.>$* $: $>removelocal $>3 $1 $3
R$*<@$*>$* $@ $1<@$2>$3
# dequote local part
R$- $: $>3 $(dequote $1 $)
R$*<@$*>$* $: $>removelocal $1<@$2>$3



Jan 21 15:30:40 lvapp13 sendmail[19220]: PAA19220: ... we do no
t relay
Jan 21 15:30:40 lvapp13 sendmail[19220]: PAA19220: Ruleset check_rcpt (@io.com>) rejection: 550 ... we do not relay
Jan 21 15:30:40 lvapp13 sendmail[19221]: PAA19221: >... we do not relay
Jan 21 15:30:40 lvapp13 sendmail[19221]: PAA19221: Ruleset check_rcpt (%io.com@[24.204.0.3]>) rejection: 550 ... we do no
t relay
Jan 21 15:31:11 lvapp13 sendmail[19225]: PAA19222: to=, delay=
00:00:31, xdelay=00:00:31, mailer=esmtp, relay=mx.io.com. [199.170.88.17], stat=
Sent (PAA14297 Message accepted for delivery)

[Craig Rants]

If you are looking to get rid of the %, then in the /etc/mail/sendmail.cf put % in the CO directive with @ and !.

GL,
C

[someone_4]

hey craig ..
i looked at that and here is the way it is set.
CO @ % !

I am looking in the sendmail.cf for something that would say we do not allow @ at the end.

Richard

[Craig Rants]

Found a link to a some rules you may want to add to your sendmail.cf file. Someone with the same problem. Look specifically at the part about denying someone without a . in the domain, that should work for you.

GL,
C

[Craig Rants]

Oops,
http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0xd9eec6af36b7d5118ff10090279cd0f9,00.html