828723 - 63.245.223.28 (landfill.bugzilla.org) public inbound SMTP TCP port 25

Status: RESOLVED INCOMPLETE

(Bugzilla :: bugzilla.org, defect)

Description

[Michael Henry [:tinfoil]]

I'm in the process of auditing our SMTP infrastructure, and in the process I found that 63.245.223.28, with reverse DNS of landfill.bugzilla.org, has SMTP (TCP Port 25) open to the internet.

Nmap scan report for landfill.bugzilla.org (63.245.223.28)

PORT   STATE SERVICE VERSION
25/tcp open  smtp    Sendmail 8.13.8/8.13.8
Service Info: OS: Unix

Is public SMTP required for the operation of this service?

If so, who is a good point of contact?  (so I can include it in my SMTP review)

Thanks!

Comment 1

[Michael Burns [:mburns]]

Bumping to DevServices, as they manage Bugzilla-related things.

Comment 2

[Shyam Mani [:fox2mike]]

This is in fact managed by the Bugzilla project (landfill.bugzilla.org) therefore, re-assigning.

Comment 3

[:glob ✱]

wicked is the main point of contact for landill sysadmin stuff.

Comment 4

[Teemu Mannermaa (:wicked)]

At the moment it's needed.

First of landfill was used to receive bugspam for bugbot. I'm in the process of moving that bugspam to happen via your relays (for bugzilla.org domain) that deliver it directly to the new host of bugbot but there are still handful of Bugzilla installs out there that send directly to landfill.

There's also Bugzilla test installs and developer accounts on landfill that send mail from the system and might want to receive bounces. Some Bugzilla test installs, as well as at least test bonsai installs are also setup to receive inbound mail for testing purposes. These are set for quite old versions so I doubt they are actively used for testing currently. But we might someday. Whether these require inbound from the world is up for debate.

I can also see some mailman related settings as well so landfill might have received DL mail once upon time, but AFAIK we don't host any mailman lists on there anymore. I'm not sure if we used to or if somebody (justdave?) was just using landfill to test mailman for our DLs.

Quickly scanning the latest maillog, I see mostly outbound mail and incoming is bugspam only. Outbound mail that might be interested on bounces seems to be going to local accounts so we might be fine on that front.

Comment 6

[Kohei Yoshino [:kohei]]

landfill is gone.