<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>mail | /var/logs/paulooi.log</title>
	<atom:link href="https://logs.paulooi.com/tag/mail/feed" rel="self" type="application/rss+xml" />
	<link>https://logs.paulooi.com</link>
	<description>Systems Admin, Web Development and etc</description>
	<lastBuildDate>Tue, 25 Mar 2014 01:49:58 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
	<item>
		<title>How to Disallow or Rate Limit Web Server Mail in Exim</title>
		<link>https://logs.paulooi.com/how-to-disallow-or-rate-limit-web-server-mail-in-exim.php</link>
					<comments>https://logs.paulooi.com/how-to-disallow-or-rate-limit-web-server-mail-in-exim.php#respond</comments>
		
		<dc:creator><![CDATA[Paul Ooi]]></dc:creator>
		<pubDate>Tue, 25 Mar 2014 01:49:58 +0000</pubDate>
				<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Systems]]></category>
		<category><![CDATA[acl]]></category>
		<category><![CDATA[Exim]]></category>
		<category><![CDATA[mail]]></category>
		<category><![CDATA[mail server]]></category>
		<category><![CDATA[php]]></category>
		<guid isPermaLink="false">http://systems.takizo.com/?p=1666</guid>

					<description><![CDATA[<p>Recently one of the apache webserver&#8217;s vhost was compromise and allow spammer to use the script to perform massive outgoing email spam. As usual, due to un-patch WordPress&#8217;s engine from a user on the web server. Ended up the &#8220;hacker&#8221;...</p>
The post <a href="https://logs.paulooi.com/how-to-disallow-or-rate-limit-web-server-mail-in-exim.php">How to Disallow or Rate Limit Web Server Mail in Exim</a> first appeared on <a href="https://logs.paulooi.com">/var/logs/paulooi.log</a>.]]></description>
										<content:encoded><![CDATA[<p>Recently one of the apache webserver&#8217;s vhost was compromise and allow spammer to use the script to perform massive outgoing email spam. As usual, due to un-patch WordPress&#8217;s engine from a user on the web server. Ended up the &#8220;hacker&#8221; been using the PHP&#8217;s mail() function sending a massive 100k++ outgoing email to email provider such as yahoo mail and gmail. <span id="more-1666"></span></p>
<p>There were a lot email queue in Exim&#8217;s queue, due to the blockage from recipient server. Unfortunately WordPress doesn&#8217;t have SMTP setting for outgoing email notification, it has to rely on third party plugins. </p>
<p>Here is what we implement on SMTP MTA to deny/rate limit outgoing from PHP&#8217;s mail() function. </p>
<p>On Exim config file, before hitting ACL configuration, place this config for non-smtp setting</p>
<pre>
<code>
acl_not_smtp = acl_check_not_smtp
</code>
</pre>
<p>After &#8220;begin acl&#8221; section, place this config </p>
<pre>
<code>
acl_check_not_smtp:

  deny
        senders = www@domain.com
        message = sorry server is offline

  deny
        ratelimit = 20 / 1h / strict / $sender_address_domain
        senders = *@domain.com
        message = sorry server is offline

  accept
</code>
</pre>
<p>The first rule is totally deny anything from apache&#8217;s vhost. It means non of the apache&#8217;s vhost can send outgoing email with PHP mail() function. If you are not comfortable with this. Can try on the second rules, which is rate limit the outgoing email, which can help to eliminate the massive outgoing email happened on apache web server UID. </p>
<p>Have fun controlling and fight with the spam <img src="https://s.w.org/images/core/emoji/16.0.1/72x72/1f609.png" alt="😉" class="wp-smiley" style="height: 1em; max-height: 1em;" /> </p>The post <a href="https://logs.paulooi.com/how-to-disallow-or-rate-limit-web-server-mail-in-exim.php">How to Disallow or Rate Limit Web Server Mail in Exim</a> first appeared on <a href="https://logs.paulooi.com">/var/logs/paulooi.log</a>.]]></content:encoded>
					
					<wfw:commentRss>https://logs.paulooi.com/how-to-disallow-or-rate-limit-web-server-mail-in-exim.php/feed</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
		<item>
		<title>Setup Sendmail Smart Relay in FreeBSD</title>
		<link>https://logs.paulooi.com/setup-sendmail-smart-relay-in-freebsd.php</link>
					<comments>https://logs.paulooi.com/setup-sendmail-smart-relay-in-freebsd.php#comments</comments>
		
		<dc:creator><![CDATA[Paul Ooi]]></dc:creator>
		<pubDate>Thu, 09 Sep 2010 04:11:00 +0000</pubDate>
				<category><![CDATA[Systems]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[freebsd]]></category>
		<category><![CDATA[gmail]]></category>
		<category><![CDATA[mail]]></category>
		<category><![CDATA[relay]]></category>
		<category><![CDATA[sendmail]]></category>
		<guid isPermaLink="false">http://systems.takizo.com/?p=1049</guid>

					<description><![CDATA[<p>It&#8217;s good that to route all your outgoing email to a relay server for centralize management. Compiling Sendmail&#8217;s Smart Relay options in FreeBSD is slightly different from Linux machine. But it&#8217;s fairly easy to do so. Just follow the steps...</p>
The post <a href="https://logs.paulooi.com/setup-sendmail-smart-relay-in-freebsd.php">Setup Sendmail Smart Relay in FreeBSD</a> first appeared on <a href="https://logs.paulooi.com">/var/logs/paulooi.log</a>.]]></description>
										<content:encoded><![CDATA[<p><a href="https://logs.paulooi.com/wp-content/uploads/2010/09/349574996_ffd563b65f.jpg"><img fetchpriority="high" decoding="async" src="https://logs.paulooi.com/wp-content/uploads/2010/09/349574996_ffd563b65f-300x199.jpg" alt="" title="349574996_ffd563b65f" width="300" height="199" class="alignleft size-medium wp-image-1050" srcset="https://logs.paulooi.com/wp-content/uploads/2010/09/349574996_ffd563b65f-300x199.jpg 300w, https://logs.paulooi.com/wp-content/uploads/2010/09/349574996_ffd563b65f.jpg 500w" sizes="(max-width: 300px) 100vw, 300px" /></a>It&#8217;s good that to route all your outgoing email to a relay server for centralize management. Compiling Sendmail&#8217;s Smart Relay options in FreeBSD is slightly different from Linux machine. But it&#8217;s fairly easy to do so. Just follow the steps below, and I assume you already have your own email relay server to relay to. </p>
<p>Go to /etc/mail<br />
run &#8220;make&#8221; command for the first time to generate &#8220;yourdomain&#8221;.cf and &#8220;yourdomain&#8221;.submit.cf / &#8220;yourdomain&#8221;.mc and &#8220;yourdomain&#8221;.submit.mc file</p>
<pre>
<code>
shell> cd /etc/mail
shell> make
shell> cp freebsd.mc "yourhostname".mc
/usr/bin/m4 -D_CF_DIR_=/usr/share/sendmail/cf/   /usr/share/sendmail/cf/m4/cf.m4 "yourhostname".mc > "yourhostname".cf
cp freebsd.submit.mc "yourhostname".submit.mc
/usr/bin/m4 -D_CF_DIR_=/usr/share/sendmail/cf/   /usr/share/sendmail/cf/m4/cf.m4 "yourhostname".submit.mc > "yourhostname"submit.cf
</code>
</pre>
<p>After mc and mf files have generated. Edit <yourdomain>.mc file, look for line below. Change the SMART HOST to your email server&#8217;s hostname. It must be hostname and you CAN&#8217;T configure IP Address for SMART HOST.</p>
<pre>
<code>
shell> vi "yourdomain".mc

dnl define(`SMART_HOST', `your.isp.mail.server')
define(`SMART_HOST', `relay.server.hostname')
</code>
</pre>
<p>Next copy &#8220;define(`SMART_HOST&#8217;, `relay.server.hostname&#8217;)&#8221; and paste it in &#8220;yourhostname&#8221;.submit.mc. It must be placed before the line of &#8220;msp&#8221; feature. </p>
<pre>
<code>
define(`SMART_HOST', `relay.server.hostname')
FEATURE(`msp', `[127.0.0.1]')dnl
</pre>
<p></code></p>
<p>After configuration has been made, now run "make install" to generate the cf file and replace sendmail.cf and submit.cf </p>
<pre>
<code>
shell> make install
shell> /usr/bin/m4 -D_CF_DIR_=/usr/share/sendmail/cf/   /usr/share/sendmail/cf/m4/cf.m4 "yourhostname".mc >  "yourhostname".cf
install -m 444  "yourhostname".cf /etc/mail/sendmail.cf
/usr/bin/m4 -D_CF_DIR_=/usr/share/sendmail/cf/   /usr/share/sendmail/cf/m4/cf.m4  "yourhostname".submit.mc >  "yourhostname".submit.cf
install -m 444 iyot.time.com.my.submit.cf /etc/mail/submit.cf
</pre>
<p></code></p>
<p>You are basically done, now. Just restart sendmail services. </p>
<pre>
<code>
shell> /etc/rc.d/sendmail restart
shell> Cannot 'restart' sendmail. Set sendmail_enable to YES in /etc/rc.conf or use 'onerestart' instead of 'restart'.
Stopping sendmail_submit.
Waiting for PIDS: 64903.
</code>
</pre>
<p>Ignore the line to change sendmail_enable to YES if your server just do email submit and it doesn't act as incoming email.</p>The post <a href="https://logs.paulooi.com/setup-sendmail-smart-relay-in-freebsd.php">Setup Sendmail Smart Relay in FreeBSD</a> first appeared on <a href="https://logs.paulooi.com">/var/logs/paulooi.log</a>.]]></content:encoded>
					
					<wfw:commentRss>https://logs.paulooi.com/setup-sendmail-smart-relay-in-freebsd.php/feed</wfw:commentRss>
			<slash:comments>3</slash:comments>
		
		
			</item>
	</channel>
</rss>
