Re: smtp_auth spam using anonymous On Sat, Feb 23, 2008 at 09:12:42PM -0400, Marc G. Fournier wrote:

> >> half-dozen or so different VPSs so far, all running Postfix 2.4.x, and I've
> >> checked on all of them and there is no user 'anonymous' :(
> >>
> >> In fact, my sasl/smtpd.conf file looks like:
> >>
> >> pwcheck_method: auxprop
> >> auxprop_plugin: sql
> >> sql_engine: sqlite
> >> sql_database: /var/db/sqlite/mailsys
> >> sql_select: SELECT %p FROM sasl_auth WHERE userid = '%u@%r'

	mechanism=LOGIN
	user=anonymous
	password=

Well the empty password seems to work. Does the above query return no
rows or an empty row?

> Feb 24 01:08:10 mydomain postfix/smtpd[5424]: > unknown[219.235.2.61]: 235 
> 2.0.0 Authentication successful

Your query perhaps returns an empty value for missing users rather than
no result, or the SASL SQL driver or plugin for LOGIN is broken.

-- 
	Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:


If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.


