Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Disabling VRFY on InterScan Messaging Security Virtual Appliance (IMSVA) 8.2

    • Updated:
    • 14 Oct 2015
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 8.2
    • Platform:
    • N/A N/A
Summary

The VRFY clause is a method of verifying the existence of a user on a mail server.

You can either verify the existence of particular user or use a wildcard verify (VRFY *) to ask the server to return the complete list of users.

 
On IMSVA version 8.2, VRFY is disabled by default but not on lower versions. The wildcard option (VRFY *) can be exploited by spammers to bulk harvest email addresses so it is necessary that you disable this clause.
Details
Public

To disable VRFY on IMSVA:

  1. Log in to your IMSVA box using root.
  2. Go to /opt/trend/imss/postfix/etc/postfix directory.
  3. Edit the main.cf file.
  4. Add the following line at the bottom of the file then save the changes:

    disable_vrfy_command = yes

  5. Reload postfix using the following command:

    postfix reload

  6. Verify if configuration is active using the following command:

    postconf | grep -i vrfy

    The result should be:

    [root@imsva postfix]# postconf | grep -i vrfy
    disable_vrfy_command = yes
    [root@imsva postfix]#

Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1060998
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.