Mail/Sendmail
|
|
Simplified AntiSpam Proceedure
Simplified Sendmail-Install-HOWTO
- Sendmail Install URLs
- Downloading
- Compiling
- Testing
- Owners and Permissions of directories, files
- Commands
|
| Secure Sendmail - AUTH, SSL |
|
| Sendmail Anti-Spam Features |
|
| Sendmail AntiSpam *.mc and *.cf Examples |
- Linux-Secn.net Examples with RBL and Check_Local
- check_local ( local copy of check_local-5.x )
- Example Sendmail.mc ( *.mc ) Files
- Additional Sendmail.cf ( CF ) Snips
- More Sendmail.cf Explanations
|
| Sendmail Macros with its anti-spam features turned on |
Linux-Sec.net/Mail/etc.mail/sendmail-8.13.x sendmail-8.12.x Sendmail Macros
- Convert config.mc into config.cf ( sendmail.cf )
- cd /usr/local/src/sendmail-8.12.x/cf/cf ; sh Build config.cf
- sendmail-8.12.x.generic.mc --> generic sendmail ( config.generic.mc )
- Sendmail w/ RBL enabled
- Sendmail w/ Header and Subject Checking
- Requires check_local
- Requires sendmail to be compiled w/ -DREGEX enabled
- Requires linux-sec.m4 or other check_header.m4 definitions you desire
- Sendmail - Disallow HTML-ized (mostly spammer) emails
- You will need to add your friends to a whitelist to allow their incoming emails
|
| Installing Sendmail with its anti-spam features turned on |
- Antispam Sendmail Install Howto
Linux-Sec.net Anti-Spam sendmail.cf Howto ( RBL checking )
Linux-Sec.net Anti-Spam sendmail.cf Howto ( header and subject checking )
Linux-Sec.net Sendmail Install Howto
Sendmail.org Setup
Cork.linux.ie Install sendmail ( untested by our crew)
Kent.edu Sendmail Installation and Operation Guide
FreeBSD.org Sendmail Installation and Operation Guide
cd /usr/local/src/sendmail-8.12.x
- Backup your existing sendmail configs
tar sendmail.backup.tgz /etc/mail/* /etc/sendmail* /usr/sbin/*mail* /usr/bin/*mail*
- sh Build
sh ./Build -c ( make clean after changing site.config.m4 )
sh Build install
- cd /usr/local/src/sendmail-8.12.x/cf/cf
1. cp generic-linux.mc config.mc
-- does NOT have antispam features enabled
2. wget http://www.Linux-Sec.net/Mail/etc.mail/sendmail.rbl.mc config.mc
-- has rbl features turned on
3. wget http://www.Linux-Sec.net/Mail/etc.mail/sendmail.check_local.mc config.mc
- sh Build config.cf
- ../../obj.Linux.2.4.20.i586/sendmail/sendmail -d72 -bt -Cconfig.cf
cp config.cf /etc/mail/sendmail.cf
cp config.mc /etc/mail/sendmail.mc
- Restart your new MTA
/etc/rc.d/init.d/sendmail stop ; sleep 5 ; /etc/rc.d/init.d/sendmail start
sendmail-8.12.x -L sm-mta -bd -q15m
- Configure your mail files in your
/etc/mail
- Restarting Sendmail
- /etc/rc.d/init.d/sendmail stop
- /etc/rc.d/init.d/sendmail start
- Manually Starting sendmail MTA daemon:
/usr/sbin/sendmail -L sm-mta -bd -q5m ; ps axuwf
- Manually Starting sendmail MSP queue runner:
/usr/sbin/sendmail -L sm-msp-queue -Ac -q5m ; ps auxwf
|
| Testing Sendmail with its anti-spam features turned on |
Uni-kiel.de
uwo.ca general sendmail.cf tests
tLDP.org
ebone.at macro explanation
Montana.edu Good Testing info
ZoneEdit.com
uibk.ac.at exploiting sendmail bugs
pi4arctan1guy.tripod.com exploiting sendmail bugs
cotse.com exploiting MTA's
phreak.org exploiting MTAs
- Online Testing
- Testing some accounts
BrandonHutchinson.com Savemail Panic
- These must aliases must exist and work
- vi /etc/mail/aliases
- MAILER-DAEMON: postmaster
- postmaster: real-user
- newaliases -or- asendmail -bi
- sendmail -bv MAILER-DAEMON
- sendmail -bv postmaster
- Testing some accounts
- sendmail -bt -Cnewtest.cf
- sendmail -d0.1 -bt < /dev/null ( version/options )
- sendmail -d0.1 -bv ( versions/options )
- sendmail -d0.1 -bv root
- sendmail -v -bv fake
- sendmail -v -bv real_user
- sendmail -v -bv fake@your_domain.com
- sendmail -v -bv real_user@your_domain.com
- sendmail -d0-8.20 -bt real_user@your_domain.com < /dev/null
- sendmail -oem real_user@your_domain.com < /dev/null
- echo '/mx earthlink.net' | sendmail -d8.8 -bt
- echo '/map access cyberpromo.com' | sendmail -bt
- echo '/map access cyberpromo.com' | sendmail -bt -d0.13
- echo '/map access 1.2.3.4' | sendmail -bt -d0.13
- echo '/map virtuser user@sub.domain.com' | sendmail -bt -Am
- echo '3 user@sub.domain.com' | sendmail -bt -Am
- echo 3,0 user@domain.com | sendmail -bt -d38.20
- echo '$=w' | sendmail -bt -d0.4 | sort
- echo '$=w' | sendmail -bt
- echo '$=R' | sendmail -bt -d0.13
- mailserver:~# sendmail -bt -Csendmail.new.cf
> checkmail <fake@your_domain.com>
> checkmail <anyone@cyberpromo.com>
> /map access cyberpromo.com
> /map virtuser foo@virtualDomain.com
> 3,0 WebMaster@VirtualDomain.com
> 3,0 RealUser@VirtualDomain.com
> ^D
(stuff) - 550 You are banned, contact your local admin
(stuff) - 550 This domain is banned, contact your local admin
(stuff) - 550 Access denied -- ( if listed in /etc/mail/access )
- check your log file ( /var/log/maillog ) for typical/proper spam-detection operations
- somebody@somewhere.com --> Rejects due to RBLs
- somebody@fake-domains.com --> domain must resolve
- anybody@cyberpromo.com --> Access denied
- sneaky@open-relay.com --> Relaying denied
- fake-user@real-domain.com --> non-existent user
|
| Error Messages |
|
