[3531] in RedHat Linux List
Re: qmail & pam was Re: Protecting sendmail?
daemon@ATHENA.MIT.EDU (nelson@crynwr.com)
Fri Nov 8 23:20:35 1996
From: nelson@crynwr.com
Date: 9 Nov 1996 04:18:33 -0000
To: redhat-list@redhat.com, djb-qmail@koobera.math.uic.edu
In-Reply-To: <19961108085324.27378.qmail@brouhaha.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Eric Smith writes:
> > Have you managed to set up a qmail machine so that it will only accept mail
> > for outside destinations from a list of allowable ips (like the ones my
> > portmaster assigns), and otherwise only accept mail for stuff in
> > control/locals?
>
> There may be a more elegant solution for this, but my approach is to run
> qmail on two separate mail relays, one for inbound mail, and one for outbound.
There is a more elegant solution. You use tcp-wrappers to detect SMTP
connections from your network, and enable relaying by setting the
environment variable RCPTHOSTS to a null value. Its mere presence
tells qmail-smtpd to ignore control/rcpthosts when queuing the mail.
You can also cause certain hosts to be treated specially by setting
RCPTHOSTS to a value like fix.me, which will append fix.me to the end
of the address. You then set up a virtualdomain handler for fix.me
that does whatever you need it to do.
I did a sendmail conversion for a customer where their users were in
the habit of generating invalid SMTP addresses without an @domain
part. Sendmail would happily fix the addresses to have the domain of
the local host. qmail isn't in the habit of gratuitiously rewriting
headers; you have to convince it to do that.
-russ <nelson@crynwr.com> http://www.crynwr.com/~nelson
Crynwr Software sells network driver support | PGP ok
521 Pleasant Valley Rd. | +1 315 268 1925 voice | The more corrupt the state,
Potsdam, NY 13676-3213 | +1 315 268 9201 FAX | the more numerous the laws.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
