Hi,
how I should configure sendmail as a gateway (with grey-lists, already
configured) in DMZ relying incoming e-mails (from Internet) to selected
e-mail server in inside LAN?
Thanks for any help,
--
john
student
> how I should configure sendmail as a gateway (with grey-lists, already
> configured) in DMZ relying incoming e-mails (from Internet) to
> selected e-mail server in inside LAN?
Minimal configuration:
a) access table entry to allow relaying to domains serviced by internal
server and relaying by internal server
[requires FEATURE(`access_db') in sendmail.mc file ]
access file entries:
to:example.com RELAY
connect:aaa.bbb.ccc.ddd RELAY
b)mailertable entry for "DNS less" routing [requires FEATURE(`mailertable')]
mailertable file entry:
example.com relay:[aaa.bbb.ccc.ddd]
In "spam world" consider also adding "per recipient" verification to
avoid necessity of sending back bounces generated by spam to non
existing mailboxes at internal server.
You can you FEATURE(`virtusertable') or FEATURE(`ldap_routing').
FEATURE(`ldap_routing') can be used with classic hash/dbm maps instead
of LDAP lookups.
--
[pl>en: Andrew] Andrzej Adam Filip anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
A newspaper is a circulating library with high blood pressure.
-- Arthure "Bugs" Baer
Post removed (X-No-Archive: yes)
Thanks a lot, it works.
--
student
=============
Andrzej Adam Filip pisze:
> student
>> how I should configure sendmail as a gateway (with grey-lists, already
>> configured) in DMZ relying incoming e-mails (from Internet) to
>> selected e-mail server in inside LAN?
>
> Minimal configuration:
>
> a) access table entry to allow relaying to domains serviced by internal
> server and relaying by internal server
> [requires FEATURE(`access_db') in sendmail.mc file ]
>
> access file entries:
> to:example.com RELAY
> connect:aaa.bbb.ccc.ddd RELAY
>
> b)mailertable entry for "DNS less" routing [requires FEATURE(`mailertable')]
>
> mailertable file entry:
> example.com relay:[aaa.bbb.ccc.ddd]
>
> In "spam world" consider also adding "per recipient" verification to
> avoid necessity of sending back bounces generated by spam to non
> existing mailboxes at internal server.
> You can you FEATURE(`virtusertable') or FEATURE(`ldap_routing').
> FEATURE(`ldap_routing') can be used with classic hash/dbm maps instead
> of LDAP lookups.
>