[cobalt-security] ORBS complaint - relaying

[Peter Frederick <pfred@xxxxxxxxx>]

Sorry if this has been discussed before - looked briefly in last couple of
months archives and couldn't see much to do with Sendmail.

We have a Cube3 that we are using for email. ORBS sent a complaint
concerning a relay test that succeeded (where RCPT TO:
<orbs-relay%sombody.com@xxxxxxxxxxx> ) to another host running MMDF.

When I tested the Cube3 out I discovered that this configuration of
sendmail also has the problem:

<< From our host>>
[admin sbin]$ ./sendmail -dp
Version 8.10.2
 Compiled with: MAP_REGEX LOG MATCHGECOS MIME7TO8 MIME8TO7 NAMED_BIND
                NETINET NETUNIX NEWDB QUEUE SASL SCANF SMTP USERDB XDEBUG

As far as I can tell Cobalt wouldn't want me changing the sendmail.cf file
(no write capability as admin or root access).

Is there an easy fix for this problem that can be done with admin
privileges?

Is there a FAQ somewhere I should look at regarding this whole topic (ie:
hardening the Cobalt Cube 3)? 

I've downloaded and installed all available Cube 3 patches (including 6.2)

Thanks in Advance



Peter Frederick
MIS Director, Indiana Packers Corp, Delphi IN
Phone: (765) 564-9705   Fax: (765) 564-3684
Work: pfred@xxxxxxxxx
Home: pjfred60@xxxxxxxx
============================================================================
'Tis better to light one candle than to curse the darkness a thousand times!