[split] Security Problem detected

[joximu]

raphael Wrote:

Quote:Maybe a good start: the setup routine should not write 127.0.0.1 into resolve.conf - see Post #8 http://www.isp-control.net/forum/securit...ml#pid9592

that's what I said... 'disabling' means not including any extra nameserver in /etc/resolv.conf

Ok, but it's still possible to hijack the mails because postfix has the domain in his local domain list. So to really fix this we need some type of double check... or control for new domains...

Thanx Raphael