sendmail question

[Glenn Steen]

On 29/11/06, Matt Kettler <mkettler at evi-inc.com> wrote:
> Suggestion:
>
> Use SPF and a SPF milter.
>
> If you private IPs in use, and have split-dns you can have your SPF records be
> different when queried from the inside vs outside. That way only inside hosts
> (including your mailserver) will see the SPF records containing your private IPs.
>
You could probably do something similar with a nicely formed
sender_restriction in PF, but ... this idea would be at least as
workable and elegant.

Complemented with a reasonable amount of LARTing, it'd be downright useful:-)
> Furnish, Trever G wrote:
> > I don't have a solution for you, but that would be a very useful
> > feature.  I'd love to limit the domains my internal users can send from,
> > to combat the problem of ignorant developers who, for example, set the
> > envelope sender to an address we don't own in mail sent from web forms.
> >
> >> -----Original Message-----
> >> From: mailscanner-bounces at lists.mailscanner.info
> >> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> >> Of Matt Hampton
> >> Sent: Wednesday, November 29, 2006 11:13 AM
> >> To: MailScanner discussion
> >> Subject: OT: sendmail question
> >>
> >> Evening
> >>
> >> Does anyone know how to configure sendmail to restrict which
> >> domains an IP can send from?
> >>
> >> I.e.
> >>
> >> 123.123.123.123 is allowed to send email from domain.com, example.com
> >> 123.123.123.124 is allowed to send email from domain.co.uk,
> >> example.com
> >>
> >> (I could do this in a milter but would prefer to do this in
> >> an database file like the access map)
> >>
> >> regards
> >>
> >> Matt
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>


-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se