Sendmail & Valid users

[Matthew Seaman]

On Fri, May 02, 2003 at 11:55:34AM -0700, Mike Hogsett wrote:

> I have a question regarding sendmail and this list may be able to point me
> in the right direction.
> 
> What I want is to be able to verify the address in the "MAIL FROM:" during
> the SMTP transaction for domains that this sendmail is responsible for.
> 
> If they are claiming to be within our domain(s) then the address in "MAIL
> FROM:" should be a valid recipient.

The standard mechanism use to control this sort of thing is the access
DB (/etc/mail/access) -- take a look at

    http://www.sendmail.org/tips/relaying.html

for a good introduction.  There's more that can go into the access
database than is discussed in that page: the canonical reference is
the /usr/share/sendmail/cf/README file.

Now, the access db is usually keyed off the domainname part of an
address: you can do some filtering on whole addresses but it isn't
really a general solution.  If you need finer grained control than the
access DB can give you, you should look into using the sendmail AUTH
mechanism:

    http://www.sendmail.org/~ca/email/auth.html

or even the STARTTLS support:

    http://www.sendmail.org/~ca/email/starttls.html
    http://www.ofb.net/%7Ejheiss/sendmail/tlsandrelay.shtml

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030502/bc44d8a8/attachment.bin