Re: Anti-spam Working Group

[Gunnar Lindberg <]

John Martin ansked for a volunteer to call vendors. Well, I didn't
volunteer but I did ask and got this nice response from Sun - From
address withheld to avoid sendmail questions flooding.

So, eventually Sun based installations will "Anti Relay improve".

What is left is the real high priority hard part, the one I will
repeat: Make sure all/enough sysadmins get to know enough of this
to actually make use of it. That's ISP work. Good luck.

	Gunnar

-----------------------------------------------------------------------
>Date: Wed, 02 Sep 1998 08:57:23 -0700
>From: $*@localhost

>Hi Gunnar,

>> I have two suggestions for you (Sun's sendmail rather):

>You've come to the right place.  :-)

>>     1)	Unauthorized Relay turned off be default would be great.
>> 	Point taken this may be hard or impossible.

>SunOS 5.7 will be shipping before too long.  It will contain sendmail
>8.9.1+Sun, with relaying partially disabled. Though it does not disable
>relaying altogether like the Sendmail Inc version of 8.9.1, it uses
>the FEATURE(relay_entire_domain), which limits relaying to client hosts
>and recipients in the local domain.  This should solve most of the
>problem.

>>     2)	Make sendmail.cf supply "Received:" like in sendmail-8;
>> 	NOT just "all he said was 'HELO default'", but more useful:
>> 
>> 	    >Received: from playground.sun.com
>> 	    >   (playground.Sun.COM [192.9.5.5])
>> 	    >   by wentzl.cdg.chalmers.se (8.8.8/8.8.8) ... etc
>> 	
>> 	This should be less impossible, right :-).

>The format for Received: headers in 8.9.1+Sun will be identical to that
>in "vanilla" 8.9.1. Also, we recently released a patch for SunOS 5.5.1
>and 5.6 which includes sendmail 8.8.8+Sun, and new config files.  These
>use the same new Received: header format.  :-)

>Thanks for the suggestions; I'm happy to be able to report good news.
>:-)
-----------------------------------------------------------------------

-----------------------------------------------------------------------
>Date: Wed, 02 Sep 1998 09:31:51 -0700
>From: $*@localhost

>> To what degree is this official info? I.e. may I hand it out to a
>> RIPE anti-spam list?

>The information is official, and public.  The web page:

>	http://www.sendmail.org/sun-specific/differences.html

>section 5.1, list item 6, discusses the anti-relay stuff.  And the
>fact that the Received: header is not listed in section 5.1 means
>that it's the same as Berkeley's.
-----------------------------------------------------------------------