Restrict user to send mail.

[Yogesh M Puranik]

Hello Gurus,

In my env, I ve sendmail with version 8.11.1(HP-UX 11.23).I ve to restrict sendmail access for a perticular user.As per my knowledge I ve followed below steps .

Consider a user "test" for whom I wana restrict sendmail access.So i followed below steps

1]Added entry in /etc/mail/access
test@domain.com REJECT

2]Recreated access.db file.
makemap dbm /etc/mail/access < /etc/mail/access.

3] Sendmail restarted

After following above steps as well , I m still getting the mails from the user "test"

Kindly Help me to guess what went wrong in my above stpes?

Thanks in advance !!

Rgds
YOgesh

[Anshumali]

Recreated access.db with DBM type? Dont we create with hash type This might have nothing to do with the solution but just wanetd to add that:

makemap hash /etc/mail/access.db < /etc/mail/access

From man makemap:


makemap handles up to three different database formats, selected using
the maptype parameter. They may be:

dbm DBM format maps. (.pag,.dir)

btree B-Tree format maps. (.db)

hash Hash format maps. (.db)

[Horia Chirculescu]

>Consider a user "test" for whom I wana restrict sendmail access

Your implementation would not be enough (of course with hash format maps). This would not restrict your user to use another smtp server for sending email. So he will be able to send emails.

It will only reject emails sent to the specified user.

Best regards,
Horia.

[Prasanth V Aravind]

Hi Yougesh,


Check this link .. which given procedure to restict one user.

http://docs.hp.com/en/5969-4321/5969-4321.pdf

Gudluck
Prasanth

[Yogesh M Puranik]

Hi all,

I ve already tried all option mentioned.I ven't get my ans yet !!

Rgds
Yogesh

[Steven Schweda]

> [...] I ve to restrict sendmail access for
> a perticular user [...]

Why? What, exactly, is the problem which you
are trying to solve?

> [...] I m still getting the mails from the
> user "test"

A user does not need to use "sendmail" to
_send_ an e-mail message. It can be done
using many different programs, including,
for example, a Telnet client.

> [...] I ven't get my ans yet !!

Perhaps you're asking the wrong question.

[Yogesh M Puranik]

Hello all,

Thnx for reply...If I am no wrong My question is pretty simple and self explainatory...

more specific :

I just want user "test" should not send mail from its own login but others should.

Rgds
Yogesh

[Steven Schweda]

> I just want user "test" should not send
> mail from its own login but others should.

Ask him politely not to send e-mail messages?

There may be a way to stop him (on the system
where the e-mail message originates), but I
don't know what it would be. Certainly,
playing with "sendmail" (on the system where
the e-mail message originates) can _not_ stop
him (because he does _not_ need to use
"sendmail" there to send an e-mail message).

You might be able to use some kind of network
access control to restrict SMTP connections
(port 25) from the sending system to some
particular e-mail server system, and then
configure "sendmail" (or some similar
program) on that server to reject messages
from your problem user.

[Steven E. Protter]

Shalom,

Consider not running the sendmail daemon.

It is needed for inbound, not outbouond mail.

The flaw in your process is the m4 daemon is not being run to rebuild your sendmail configuration.

http://hpux.ws/buildmail.hpux.text

Shows how to do that.

SEP