>>>while sendmail config tweaking is discussed: does our sendmail as
>>>shipped on 1.4 and 1.5 permit non-pre-arranged third-party
>>>relaying by default?  If it does, it's my opinion that it ought
>>>to be fixed to not do that.
>>i believe that 1.4 shipped with 8.8.8, which *is* an open relay by
>>default.  1.5 has 8.11.0 in it, so that ought to be safe.  the default
>>of open relaying was fixed in 8.9.0.
>
>	my memory is just like above.  since 8.9.x, it checks MX record.

well...that was *one* mechanism.  there were others, including not to
relay *anything*.

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."