topic Re: email for some, not for others in Operating System - HP-UX

email for some, not for others

Fred Martin_1 — Wed, 27 Aug 2003 14:05:33 GMT

I have a single HP-UX machine. It is our sendmail server, and our main database server.

All users have a unix account, and therefore email access - for internal company email.

For certain "authorized by policy" users, there is an entry in sendmail's userdb, which gives them a pretty name to use for internet email (our login names are not pretty).

Only those with a userdb entry are supposed to be sending/receiving outside the company.

Is there a way in sendmail to enforce this?

Some users only have unix access (terminals) and some have PCs that POP in for mail.

Again, they all have email for internal use.

My firewall already only allows mail packets to and from my unix server, so they have to go through it in any case.

It's a bit complex because sendmail needs to relay for my own network but not others; needs to allow local email for all that have an account on the unix machine; but should only send or receive email to other networks (internet) if they have a userdb entry.

Re: email for some, not for others

Geoff Wild — Wed, 27 Aug 2003 14:15:17 GMT

I'm on course right now, so I'm not positive but, if you create an access.db (makemap hash) on /etc/mail/access with a list of all the ids:

yourdomain.com REJECT
user1@yourdomain.com OK
user2@yourdomain.com OK

That will reject everything except those you say OK for - not too sure if it stops them from sending though.....

When I get a chance, I'll look further - unless someoneelse replies.

Rgds...Geoff

Re: email for some, not for others

Fred Martin_1 — Wed, 27 Aug 2003 14:17:18 GMT

I think that will also stop them from using mail for local sending/receiving? I have an access file already set up to stop some spam, so I'll test it in any case.

Re: email for some, not for others

Geoff Wild — Wed, 27 Aug 2003 14:38:59 GMT

Yes - that is correct - it will block your other users from local mail....sorry about that...wrong answer...

I think you may have to write your own sendmail rulesets to accomplish what you want to do....

Rgds...Geoff

Re: email for some, not for others

Geoff Wild — Wed, 27 Aug 2003 15:25:39 GMT

Have a look at:

http://www.sendmail.org/~ca/email/restrict.html

Rgds...Geoff

Re: email for some, not for others

Steven E. Protter — Wed, 27 Aug 2003 15:36:54 GMT

This function is normally handled in the /etc/mail/aliases file

It has entries like this:

schmobagel stevenprotter@yourdomain.net

Setting this and restarting sendmail should do the job.

Sometimes however you won't get the right address on outbound mail under these circumstances.

Then you need entries in:

/etc/mail/virtusertable

/etc/mail/genericstable

These are tab delimited and provide a user database to make sure outbound and inbound mail gets to the right user.

virtusertable
stevenprotter@yourdomain.net schmobagel

genericstable is the reverse

schmobagel stevenprotter@yourdomain.net

To get these into the databases requires running the gen_cf utility that ships with HP-UX.

SEP

Re: email for some, not for others

Fred Martin_1 — Wed, 27 Aug 2003 17:04:13 GMT

Geoff,

The article on sendmail.org is interesting - I looked at my sendmail.cf file and there already is a "Local_check_rcpt" rule ... it looks like this:

SLocal_check_rcpt
Scheck_rcpt
R$* $: $1 $| $>"Local_check_rcpt" $1
R$* $| $#$* $#$2
.....etc......

There's a note in that article about having more than one Local_check_rcpt, I'll need to read up on all this.