On Fri, 28 Apr 2000 09:34:10 EDT, Margaret King <[log in to unmask]>  said:
> We are (hopefully not the only site) using Sendmail with Listserv
> on an AIX system.  We are having a problem with spammers using
> the system (not Listserv, just SMTP) as a relay.  We want to use
> the anti-relay stuff in Sendmail (like that FR line...) to
> stop this, but I'm a little nervous because I know that some
> anti-spam stuff (at least if misconfigured) causes problems for
> Listserv.  Is there a Listserv-aware Sendmail guru out there who
> can tell me what if anything I need to watch out for?  (Failing

Hmm.. Listserv aware.. Sendmail. AIX.  Umm.. that would be me. ;)

Actually, you do *NOT* need to take any special care with Listserv and
sendmail as far as relaying goes.  Remember that it's *two* seperate pieces
of email - one from the outside world coming in to listserv, and then a
seperate one outbound from listserv to the world.

Note that you *do* need to get up to Sendmail 8.9.3 or later.  IBM ships
8.9.3 as part of AIX 4.3.3.  If you're at an earlier AIX level, or if you
want Sendmail 8.10.1 (do *NOT* use 8.10.0 on AIX, there's a nasty security
hole that I found with the linker), you will have to build it yourself
(which shouldn't be too hard).  Our Listserv box is currently running
8.10.1

Here's most of what I use for my listserv machine's sendmail.mc:

include(`../m4/cf.m4')
OSTYPE(aix4)dnl

FEATURE(nocanonify)
FEATURE(use_cw_file)
FEATURE(dnsbl)
FEATURE(dnsbl,`dul.maps.vix.com')
FEATURE(dnsbl,`relays.mail-abuse.org')
FEATURE(dnsbl,`relays.orbs.org')

FEATURE(access_db, `hash /etc/mail/access')
FEATURE(blacklist_recipients)

FEATURE(nouucp,`reject')

MAILER(local)
MAILER(smtp)

define(`confMAX_HOP', 30)

I use the 'dnsbl' against 4 different databases - that cuts down the spam
quite a bit.  access_db and blacklist_recipients are there mostly to deal
with exceptions (see http://www.orbs.org/bugtraq.html for the full story).
Most of the rest of what I trimmed out is for performance tuning, and you
can probably skip unless you're seeing deliveries in the 6-digit-per-day
and up level...

If that isn't enough info, feel free to yell for more....


--
                                Valdis Kletnieks
                                Operating Systems Analyst
                                Virginia Tech