Zmailer security/anti-spam features

Date: Sun, 15 Nov 1998 04:24:58 -0800
From: John Nemeth <jnemeth@cue.bc.ca>
To: David Potter <potter@csuite.ns.ca>, csuite-install@chebucto.ns.ca, csuite-dev@chebucto.ns.ca
Cc: Jim Foltz <aa204@acorn.net>
Precedence: bulk
Return-Path: <csuite-install-mml-owner@chebucto.ns.ca>

next message in archive
next message in thread
previous message in archive
previous message in thread
Index of Subjects

Index of Subjects
On Nov 10,  2:34pm, David Potter wrote:
} On Tue, 10 Nov 1998, Jim Foltz wrote:
} 
} > How does zmailers anti-spam and relaying features stack up against sendmail
} > (our current MTA)?

     Hmm, I guess it's about time I posted my instructions for how to
integrate sendmail into CSuite (see below)...

} The version of Zmailer that is in the CSuite distribution does not
} include much in the way of anti-spam tools... the newer versions do... I'm
} not aware of any security issues associated with the included version.

     I've also heard that there is a problem with one of the ESMTP
extensions in the version of Zmailer supplied with CSuite.  I believe
it was the "CHUNKING" support that was problematic.

} Our inclusion of zmailer is linked to some of the mailing list
} administration tools (an interface of sorts for majordomo). These go
} quite deep into CSuite, and we're in the process of re-doing this area.

     Actually, it doesn't go that deep, and there are surprisingly few
changes required.

} As example of the complex relationships...
} 
} The IP (information provider) creation routines... are designed to create
} two mailing lists (one private - for comments on the web-page... etc; and
} one public - for communications with all interested parties.)

     Although, IP registration form ask for the name of a public list,
there is in fact no code to create the list.  When I asked about this,
I was told that it was because you wanted to train people before
giving them mailing lists, so I simply removed it from the form.

} -----
} 
} As I mentioned, we're in the early stages of reviewing these systems. 

     Personally, I've never cared for Majordomo for a number of
reasons.  Has any thought been given to using Listproc, or the MailMan
MLM that was mentioned here previously?

}-- End of excerpt from David Potter

     Okay, here's how to get CSuite to work with sendmail:

1) Remove zmailer from the CSuite start up script.
2) cd $CS_ROOT/etc/mail/bin
   mv newaliases newaliases.orig
   mv sendmail sendmail.orig
   ln -s /usr/lib/sendmail newaliases # or, wherever sendmail is
   ln -s /usr/lib/sendmail sendmail
3) edit $CS_ROOT/etc/conf/vars
   - change MAIL_ALIASES to point to your alias file
     - I created a seperate alias file for CSuite to use
4) copy the CSuite aliases from $CS_ROOT/var/mail/db/aliases to the
   alias file mentioned in 3) and resolve conflicts
5) if you used a seperate alias file then adjust your sendmail.cf
   - in my sendmail.mc file, I used:
     define(`ALIAS_FILE', `/etc/mail/aliases,/etc/mail/cs-aliases')dnl
   - in my sendmail.cf file, this is:
     O AliasFile=/etc/mail/aliases,/etc/mail/cs-aliases
6) if you used a seperate alias file in step 3) then you need to apply
   this patch to $CS_ROOT/lib/ok-custom:

*** junk        Sun Nov 15 03:53:55 1998
--- ok-custom   Thu Jun 25 15:33:32 1998
***************
*** 36,41 ****
--- 36,42 ----
           [ -f $LISTSERVDIR/$it ] ||
           grep -i "^$it:" /etc/passwd >/dev/null ||
           grep -i "^$it:" $MAIL_ALIASES >/dev/null ||
+          grep -i "^$it:" /etc/mail/aliases >/dev/null ||
           grep -h -i "^$it:" $CS_PRIVATE/custom/* | grep -v -i "^$it:$2" >/dev/null

        then

7) edit $CS_ROOT/lib/mkcustom and comment out the references to zmailer

     The above stuff gets you basic functional integration of
sendmail.  Finally, here's a patch for $CS_ROOT/admin-bin/mkmdml,
which handles the mailing list stuff that David Potter is talking
about (it also deletes some stuff that is specific to CCN):

8) apply this patch to $CS_ROOT/admin-bin/mkmdml:

begin 644 mkmdml.diff
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M9V