Hello,
Using sendmail, we would like to reject emails from ALL the domains,
except the ones specified in a "white list".
We don't want to maintain a list of domains/addresses to block.
Anyone has a suggestion?
Imad
imadayad
> Using sendmail, we would like to reject emails from ALL the domains,
> except the ones specified in a "white list".
>
> We don't want to maintain a list of domains/addresses to block.
>
> Anyone has a suggestion?
Do you want to do it based on ... ?
a) envelope sender email address
b) connecting host "reverse" DNS
--
[pl>en: Andrew] Andrzej Adam Filip : anfi@priv.onet.pl : anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
.... relaxed in the manner of a man who has no need to put up a front of
any kind.
-- John Ball, "Mark One: the Dummy"
----
http://groups.google.com/groups?selm=87ejd445wg@kristen.fsf. hobby-site.com
Well,
We would like to do it based in the domain name, i mean "All Domains
are Rejected", except mydomain.com for example.
Imad
On Dec 30, 6:24 pm, Andrzej Adam Filip
> imadayad
> > Using sendmail, we would like to reject emails from ALL the domains,
> > except the ones specified in a "white list".
>
> > We don't want to maintain a list of domains/addresses to block.
>
> > Anyone has a suggestion?
>
> Do you want to do it based on ... ?
> a) envelope sender email address
> b) connecting host "reverse" DNS
>
> --
> [pl>en: Andrew] Andrzej Adam Filip : a...@priv.onet.pl : a...@xl.wp.pl
> Open-Sendmail:http://open-sendmail.sourceforge.net/
> ... relaxed in the manner of a man who has no need to put up a front of
> any kind.
> -- John Ball, "Mark One: the Dummy"
> ----
> http://groups.google.com/groups?selm=87ejd44...@kristen.fsf. hobby-site.com
imadayad
> Well,
>
> We would like to do it based in the domain name, i mean "All Domains
> are Rejected", except mydomain.com for example.
>
>
> Imad
Rephrase question:
Do you want use
a) domain of envelope sender email address
b) domain of connecting host ("reverse" DNS)
.... or something else ....
c) domain of hostname given on HELO/EHLO
> On Dec 30, 6:24 pm, Andrzej Adam Filip
> > imadayad
> > > Using sendmail, we would like to reject emails from ALL the domains,
> > > except the ones specified in a "white list".
> >
> > > We don't want to maintain a list of domains/addresses to block.
> >
> > > Anyone has a suggestion?
> >
> > Do you want to do it based on ... ?
> > a) envelope sender email address
> > b) connecting host "reverse" DNS
> >
> > --
> > [pl>en: Andrew] Andrzej Adam Filip : a...@priv.onet.pl : a...@xl.wp.pl
> > Open-Sendmail:http://open-sendmail.sourceforge.net/
> > ... relaxed in the manner of a man who has no need to put up a front of
> > any kind.
> > -- John Ball, "Mark One: the Dummy"
> > ----
> > http://groups.google.com/groups?selm=87ejd44...@kristen.fsf. hobby-site.com
On Dec 31, 1:51 am, Kari Hurtta
> imadayad
>
> > Well,
>
> > We would like to do it based in the domain name, i mean "All Domains
> > are Rejected", except mydomain.com for example.
>
> > Imad
>
> Rephrase question:
>
> Do you want use
>
> a) domain of envelope sender email address
> b) domain of connecting host ("reverse" DNS)
>
> ... or something else ....
>
> c) domain of hostname given on HELO/EHLO
>
> > On Dec 30, 6:24 pm, Andrzej Adam Filip
> > > imadayad
> > > > Using sendmail, we would like to reject emails from ALL the domains,
> > > > except the ones specified in a "white list".
>
> > > > We don't want to maintain a list of domains/addresses to block.
>
> > > > Anyone has a suggestion?
>
> > > Do you want to do it based on ... ?
> > > a) envelope sender email address
> > > b) connecting host "reverse" DNS
>
> > > --
> > > [pl>en: Andrew] Andrzej Adam Filip : a...@priv.onet.pl : a...@xl.wp.pl
> > > Open-Sendmail:http://open-sendmail.sourceforge.net/
> > > ... relaxed in the manner of a man who has no need to put up a front of
> > > any kind.
> > > -- John Ball, "Mark One: the Dummy"
> > > ----
> > > http://groups.google.com/groups?selm=87ejd44...@kristen.fsf. hobby-site.com
Hi,
Well, reverse DNS might be the safer one, but I would go any
solution.
Can you tell which is the easiest to implement?
Imad
imadayad
> On Dec 31, 1:51 am, Kari Hurtta
>> imadayad
>>
>> > Well,
>>
>> > We would like to do it based in the domain name, i mean "All Domains
>> > are Rejected", except mydomain.com for example.
>>
>> > Imad
>>
>> Rephrase question:
>>
>> Do you want use
>>
>> a) domain of envelope sender email address
>> b) domain of connecting host ("reverse" DNS)
>>
>> ... or something else ....
>>
>> c) domain of hostname given on HELO/EHLO
>>
>> > On Dec 30, 6:24 pm, Andrzej Adam Filip
>> > > imadayad
>> > > > Using sendmail, we would like to reject emails from ALL the domains,
>> > > > except the ones specified in a "white list".
>>
>> > > > We don't want to maintain a list of domains/addresses to block.
>>
>> > > > Anyone has a suggestion?
>>
>> > > Do you want to do it based on ... ?
>> > > a) envelope sender email address
>> > > b) connecting host "reverse" DNS
>
> Well, reverse DNS might be the safer one, but I would go any
> solution.
> Can you tell which is the easiest to implement?
The classic advice is to use access file to
1) explicitly lists hosts/nets allowed to connect
2) block all */8 nets except 127.0.0.0/8 [default reject]
sample access file:
#v+
# loopback IP address
connect:127.0.0.1 RELAY
# list of hosts allowed to connect
connect:a.b.c.d OK
connect:d.e.f.g OK
# default reject of all remaining
connect:0 REJECT
connect:1 REJECT
....
connect:126 REJECT
connect:128 REJECT
connect:129 REJECT
....
connect:255 REJECT
#v-
--
[pl>en: Andrew] Andrzej Adam Filip : anfi@priv.onet.pl : anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
You can't hold a man down without staying down with him.
-- Booker T. Washington
----
http://groups.google.com/groups?selm=877iiva0pq@robin.fsf.ho bby-site.com
On Dec 31 2007, 9:32 am, Andrzej Adam Filip
> imadayad
> > On Dec 31, 1:51 am, Kari Hurtta
> >>imadayad
>
> >> > Well,
>
> >> > We would like to do it based in the domain name, i mean "All Domains
> >> > are Rejected", except mydomain.com for example.
>
> >> > Imad
>
> >> Rephrase question:
>
> >> Do you want use
>
> >> a) domain of envelope sender email address
> >> b) domain of connecting host ("reverse" DNS)
>
> >> ... or something else ....
>
> >> c) domain of hostname given on HELO/EHLO
>
> >> > On Dec 30, 6:24 pm, Andrzej Adam Filip
> >> > >imadayad
> >> > > > Using sendmail, we would like to reject emails from ALL the domains,
> >> > > > except the ones specified in a "white list".
>
> >> > > > We don't want to maintain a list of domains/addresses to block.
>
> >> > > > Anyone has a suggestion?
>
> >> > > Do you want to do it based on ... ?
> >> > > a) envelope sender email address
> >> > > b) connecting host "reverse" DNS
>
> > Well, reverse DNS might be the safer one, but I would go any
> > solution.
> > Can you tell which is the easiest to implement?
>
> The classic advice is to use access file to
> 1) explicitly lists hosts/nets allowed to connect
> 2) block all */8 nets except 127.0.0.0/8 [default reject]
>
> sample access file:
> #v+
> # loopback IP address
> connect:127.0.0.1 RELAY
> # list of hosts allowed to connect
> connect:a.b.c.d OK
> connect:d.e.f.g OK
> # default reject of all remaining
> connect:0 REJECT
> connect:1 REJECT
> ...
> connect:126 REJECT
> connect:128 REJECT
> connect:129 REJECT
> ...
> connect:255 REJECT
> #v-
>
> --
> [pl>en: Andrew] Andrzej Adam Filip : a...@priv.onet.pl : a...@xl.wp.pl
> Open-Sendmail:http://open-sendmail.sourceforge.net/
> You can't hold a man down without staying down with him.
> -- Booker T. Washington
> ----
> http://groups.google.com/groups?selm=877iiva...@robin.fsf.ho bby-site.com
Hi,
Your input was very helpful. Thanks.
I'm trying to do the same with the "From:" tag in the access file, to
restrict the list of domain or addr
that can be inserted in the "MAIL FROM:", but it's not working.
Any comment?
imadayad
> [...]
> Your input was very helpful. Thanks.
> I'm trying to do the same with the "From:" tag in the access file, to
> restrict the list of domain or addr
> that can be inserted in the "MAIL FROM:", but it's not working.
>
> Any comment?
I think the best way would require simple 2-3 lines patch of
cf/m4/proto.m4 to make "F" rule set do finally lookup for "from:"
[ for default value ].
Are you ready to *TEST* it?
--
[pl>en: Andrew] Andrzej Adam Filip : anfi@priv.onet.pl : anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
.... at least I thought I was dancing, 'til somebody stepped on my hand.
-- J. B. White
----
http://groups.google.com/groups?selm=873at72ikw@gregory.fsf. hobby-site.com