I think it's true (Re: [Spambayes] Spambayes as an open mil relay ???)

[Jeff Epler]

On Mon, Mar 01, 2004 at 06:34:54PM -0000, Lee Edward Armstrong wrote:
> However today i came back to my pc after work and saw my net connection being 
> hammered....Looked into what my firewall said and the only thing running was 
> spambayes !

I didn't want to believe this, but it looks like it might be the case.

I'm using 1.0a7 on Unix, and I added these lines to my ~/.spambayesrc
(on "craie"):
    [smtpproxy]
    remote_servers: localhost
    listen_ports: 25000
and ran sb_smtpproxy.py

then, on another machine, I ran "telnet craie 25000" and got an SMTP
banner.

strace of sb_smtpproxy shows that it is binding all interfaces:
    bind(3, {sa_family=AF_INET, sin_port=htons(25000),
        sin_addr=inet_addr("0.0.0.0")}, 16) = 0

specifying "listen_ports: localhost:25000" doesn't make a difference.
(great, it's silently ignoring my attempts to fix the problem!)

this is BAD BAD BAD and warrants a very quick fix.  The following seems
to work but is probably less than ideal

--- /usr/bin/sb_smtpproxy.py	2003-12-21 19:07:54.000000000 -0600
+++ /tmp/sb_smtpproxy.py	2004-03-01 14:53:36.000000000 -0600
@@ -250,6 +250,7 @@
 
     def __init__(self, serverName, serverPort, proxyPort, trainer):
         proxyArgs = (serverName, serverPort, trainer)
+        proxyPort = ('localhost', proxyPort[1])
         Dibbler.Listener.__init__(self, proxyPort, BayesSMTPProxy,
                                   proxyArgs)
         print 'SMTP Listener on port %s is proxying %s:%d' % \



Jeff