mapping ip to a domain for relaying purpose

[Andy Waldoz]

Hi,

Our HP UX sendmail servers are the last mail-relays in our environment before the mail reach the internet.

In most cases we accept mail from internal servers but now we need to relay mail for an external company that will host there servers in our environment.

My question : can sendmail only relay mails from that server for there domain, so we can tighter the security?

I thinking towards an access file maybe, don't know if that is possible??

192.168.1.1 RELAY externaldomain.com

anyone?

cheers,
-aw-

[Steven E. Protter]

Shalom,

The answer is yes, this is possible.

You will need to set up sendmail.mc (hp equivalent varies depends on version of HP-UX which you did not share).

This would be done in the access configuration

domainname.com OK

Then compile m4 and restart sendmail.

I have a base script that does some of the work for you.

http://www.hpux.ws/buildmail.hpux.text

For more on the intricacies of sendmail, see http://www.sendmail.org

You also probably want to define what servers are allowed to relay through this server and what not.

Also in the access file

192.168.1.10 RELAY
192.168.2 REJECT 554 relay denied.

SEP

[Andy Waldoz]

Steven,

We allready have a running sendmail config on the server together with an access file and some virtual domains.

The thing I like to see is that the sendmail server only relays mails for example from 192.168.1.1 only if senders domain is foo.com

other domain he will not relay for this IP.

for the moment I don't know if that's possible.

grts,

-a-w-