Restricting user mailing on HP-UX 11.00

[Gerard Moroney]

Hi,

I am putting a HP-UX server running v11.00 in a secure environment. We need the standard mail functionality between individual users on the server but need to find a method to restrict those users that can send messages off the server to the company intranet.

Any ideas?

[Tom Geudens]

Hi,
I'm not the sendmail-guru :-) but if the number of servers the secure-server can "see"
(either by dns or hosts) is limited, you can do this by modifying /etc/mail/sendmail.cw

Every servername in that file would be considered (for sendmail) to be the local server. So if the name of the secure-server is (for example) server01 and your "normal" mailhost would be server02 this file might
contain something like :

localhost
loopback
server01
server02

Thus making server02 (for sendmail) also the local machine.

Hope it helps,
Tom Geudens

[Roger Baptiste]

hi,

I think you can do this, by changing the DS entry in the /etc/mail/sendmail.cf file to point to your localhost :
DSlocalhost
/sbin/init.d/sendmail stop
/sbin/init.d/sendmail start

This will point the relayhost entry to your local system and shouldnt let external mail through.

Also, if your internal mail server is a Unix box, you can add an entry in /var/adm/inetd.sec file of it to deny access to SMTP port 25 from the unix box.

HTH
raj

[Sanjay_6]

Hi Gerard,

Take a look at this thread. IT might help you in restricting a particular user / users from using sendmail for mailing,

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=940bac6c1be1234a55/screen=ckiDisplayDocument?docId=200000054056578

Hope this helps.

Regds