sendmail ...

sendmail ...

am 23.06.2004 10:06:13 von terry white

.... ciao:

i have sendmail configured to use 'access', and for the most part
seems to work fine. however.

i have 'bulk' denied "hotmail" and the like. how do i go about
allowing 'user@blah.blah.yahoo.com'. the following fails in that regard:

"user@*.yahoo.com OK" ...

--
.... i'm a man, but i can change,
if i have to , i guess ...

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

Re: sendmail ...

am 23.06.2004 17:41:58 von Glynn Clements

terry white wrote:

> i have sendmail configured to use 'access', and for the most part
> seems to work fine. however.
>=20
> i have 'bulk' denied "hotmail" and the like. how do i go about
> allowing 'user@blah.blah.yahoo.com'. the following fails in that reg=
ard:
>=20
> "user@*.yahoo.com OK" ...

You can't. At least, not by simply adding entries to the access map;
you would have to either change the rulesets which use the access map,
or change the way in which the access map operates.

The domain part will be tested against the actual domain plus all
parent domains, i.e. user@blah.blah.yahoo.com will result in lookups
for blah.blah.yahoo.com, blah.yahoo.com, yahoo.com and com. However,
the full address (with the user@ part) is only tested with the exact
domain.

In summary, passing user@blah.blah.yahoo.com to the check_mail ruleset
will result in the following keys being looked up in the access map:

From:user@blah.blah.yahoo.com
user@blah.blah.yahoo.com
From:user@
user@
From:blah.blah.yahoo.com
blah.blah.yahoo.com
From:blah.yahoo.com
blah.yahoo.com
From:yahoo.com
yahoo.com
From:com
com

Keyed map lookups are always exact-match; there are no wildcards or
similar functionality.

The simplest workaround which I can think of is to hardwire an
exception into the access map, e.g. (untested):

# Access list database (for spam stomping)
Kaccess0 regex -aOK user@.*\.yahoo.com
Kaccess1 hash -o /etc/mail/access.db
Kaccess sequence test access

Doing this for many addresses would quickly become impractical. In
that situation, you would need see if one of the other supported map
types (see =A75.9 of the manual) supports wildcarded keys (the last
resort would be the "prog" type, but that's extremely inefficient).

--=20
Glynn Clements
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" =
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html