[ LUGOS ] SMTP mailer, kateri, opcije

[Jure Koren]

On Fri, May 05, 2000 at 11:22:19AM +0200, Marko Cuk wrote:
> Hello !!
> 
> Glede na vso paniko okoli virusa Ilove'ya, me zanima, kako narediti
> kaksne filtre v SMTPju, kot recimo relyjanje maila z dolocenim subjectom
> in podobno. Videl sem tudi ze antivirus checkerje v SMTP serverjih. Jaz
> uporabljam sendmail.
> 
> Zanima me pa tudi to, zakaj uporabljate qmail in podobne programcke, oz.
> zakaj ne sendmaila ? Saj ne, da navijam za sendmail, vendar je nekako
> precej razsirjen.
> Kolikor se spomnem, je bilo v qmailu precej zapleteno naredili aliase.
> Ali je se sedaj tako ?

Tega ne vem. Uporabljam postfix, zakaj, beri naprej... Qmail seveda
ne more biti pocasnejsi od sendmaila, nekaterim je vsec njegova zasnova.

> Skratka, rad bi nekaj vasih izkusenj z SMTPji in morda neko primerjavo
> sendmail - nekaj dobrega.

Postfix je za nekaj redov velikosti hitrejsi in manjsi. Najbrz je tudi
precej bolj varen. Konfiguracija je precej bolj intuitivna (no ja, kakor
za koga). Manj featuresov ima, so pa tisti ki jih ima toliko bolj
prakticno uporabni.

Okoli virusa:


CERT sporocilo je vsebovalo navodila, kako filtering izvest
v sendmailu in se kje:

=============================================================================

Filter Virus in E-Mail

   Sites can use email filtering techniques to delete messages containing
   subject lines known to contain the worm. For sites using unix, here
   are some possible methods:

Sendmail

   The following sendmail rule will delete all messages with the Subject:
   line ILOVEYOU:

   HSubject:[tab][tab][tab]$>Check_Subject
   D{MPat}ILOVEYOU
   D{MMsg}This message may contain the ILOVEYOU virus
   SCheck_Subject
   R${MPat} $*[tab]$#error $: 553 ${MMsg}
   RRe: ${MPat} $*[tab]$#error $: 553 ${MMsg}
   RFW: ${MPat} $*[tab]$#error $: 553 ${MMsg}

PostFix

   Add the following line in /etc/postfix/header_checks:

   /^Subject: ILOVEYOU/ REJECT

Procmail

   This procmail rule also deletes any messages with the Subject: line
   containing "ILOVEYOU":

   :0 D
   * ^Subject:[[tab] ]+ILOVEYOU
   /dev/null

   Note that in all of these examples, [tab] represents a literal tab
   character, and must be replaced with one for this to work correctly.

==============================================================================