我很惭愧,但我得寻求帮助。我的服务器被用来发送垃圾邮件,我发现我可以简单地连接到telnet (编辑:从办公室中的任何服务器、家中,甚至直接从CMD/Putty Telnet)、在没有任何登录/授权的情况下将/rcpt的邮件添加到/data,并将邮件从我的域发送到任何外部邮箱(例如gmail帐户)。我正在Debian上使用Exim/SMTP/CSF,并且对它们有基本的了解。
root@vps:~# telnet example.com 25
Trying 19x.10x.8x.1xx...
Connected to example.com.
Escape character is '^]'.
220 serwer.example.com.pl ESMTP Exim 4.91 Wed, 19 Sep 2018 10:48:05
+0200
mail from: xyz@example.com
250 OK
rcpt to: outerbox@gmail.com
250 Accepted
data
354 Enter message, ending with "." on a line by itself
test data.
.
250 OK id=1g2Y9t-0003yu-Of
我希望防止这种情况,并强制进行任何形式的身份验证,以防止从我的服务器向外部邮箱发送垃圾邮件。My第二服务器在尝试做同样的事情时,在"rcpt to“之后:命令返回"550身份验证所需”。我认为这是正确的行为,所以您不能发送垃圾邮件。
在我的exim.conf中,我获得了空的中继参数(我尝试将服务器的IP或本地主机附加,但没有成功):
addresslist whitelist_senders = lsearch;/etc/virtual/whitelist_senders
addresslist blacklist_senders = lsearch;/etc/virtual/blacklist_senders
domainlist blacklist_domains = lsearch;/etc/virtual/blacklist_domains
domainlist whitelist_domains = lsearch;/etc/virtual/whitelist_domains
domainlist local_domains = lsearch;/etc/virtual/domains
domainlist relay_domains =
domainlist use_rbl_domains = lsearch;/etc/virtual/use_rbl_domains
hostlist auth_relay_hosts =
hostlist bad_sender_hosts = lsearch;/etc/virtual/bad_sender_hosts
hostlist bad_sender_hosts_ip = net-lsearch;/etc/virtual/bad_sender_hosts
hostlist relay_hosts =
hostlist whitelist_hosts = lsearch;/etc/virtual/whitelist_hosts
hostlist whitelist_hosts_ip = net-lsearch;/etc/virtual/whitelist_hosts
认证部分
begin authenticators
plain:
driver = plaintext
public_name = PLAIN
server_prompts = :
server_condition = "${perl{smtpauth}}"
server_set_id = $2
login:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${perl{smtpauth}}"
server_set_id = $1
如何保护smtp套接字?如何强制“身份验证所需”过程?我试图将.conf文件与我的第二台服务器进行比较,但是尽管我尝试了两天,我还是运气不佳。
发布于 2018-09-19 10:04:13
从*
中删除dc_relay
。这样任何人都可以发送邮件。在文件/etc/exim4/exim4.conf.localmacros
中添加以下内容
MAIN_TLS_ENABLE = true
请添加server_mail_auth_condition
检查这里
关于更多的SMTP身份验证信息
https://serverfault.com/questions/931643
复制相似问题