httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Brian Dessent <br...@dessent.net>
Subject Re: [users@httpd] why isn't my server public???
Date Sat, 20 Dec 2003 04:06:02 GMT
Don wrote:

> > outbound packets with destination port 25/tcp.  This prevents the users
> > from delivering mail directly to SMTP servers, so that they must use the
> > ISP's mail server to relay mail.  This prevents spammers from sending
> > directly from their machines, as well as preventing trojaned boxes from
> > becoming spam relays.
> 
> Actually "prevents the users..." is a bit strong since redirection
> services are around to thwart that.

Unless the remote mail server is answering on something other than 25,
you're not going to be able to deliver mail to it directly.  Unless of
course you use a proxy of some kind.  But that's kind of the whole point
-- you can never prevent someone from doing something if they can tunnel
it through an intermediary, but you can certainly stop them from doing
it directly.  What it gains you is that the machine is no longer useful
as a relay itself.  If a spammer 0wned it (or the machine was otherwise
compromised) they wouldn't be able to use it to deliver spam, making it
pretty worthless target.

Brian

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message