[AusNOG] Did you wake up one day as a slave? unmask the reality of our financial existence.

[Terry Sweetser (SkyMesh CTO)]

+1

and on a single box, you can still do this by binding your outbound MTA 
to localhost, and your inbound MTA to only your public ip address

and how about SFP and DKIM?

http://about.me/terry.sweetser

On 01/03/13 11:22, Heinz N wrote:
> IMHO : If the ausnog SMTP MTA relays for ausnog.net, then the external 
> spammer can pretend to be FROM ausnog.net, sending TO ausnog.net. The 
> SMTP agent will then relay with no questions asked. No pwnage required.
>
> I have had this problem before. I have set up 2 SMTP MTAs. One 
> internal and one external. The external one WILL accept email for the 
> hosted domains but it WON'T relay for them! The internal SMTP agent 
> (with trusted ACL list) is the only one that will relay for the hosted 
> domains.
>
> Regards,
> Heinz N.