Hi there...

I have installed and set up a sendmail MTA on a linux RH 7.3
distro. I run a server for a small online open source community;
mainly just a small group of friends that all needed various developmental space.

What I want to do is allow relaying to only these people
(they aren't all real psyched with the current commandline
MUAs which was my approach to eliminating relaying
altogether).

My problem:

I understood the documentation as saying that I could
be specific in my listings within the access_db, i.e.:

some_user@somehost.somedomain RELAY

but this doesn't seem to work.

If I remove the "some_user@", and just leave the "somehost.somedomain" part it works fine.

The problem with this, obviously, is that I am now
allowing relaying from that entire domain, which
is unacceptable.

ideally, what I want to do is just set this so that if the connecting
party is a user on the server, than he is allowed to relay.

I tried setting: FEATURE('relay_local_from')
but this had no effect, and doesn't strike me as overly
secure.

----------

I am rebuilding the access_db with the command:
makemap hash /etc/mail/access < /etc/mail/access

and the config with the command:
m4 /etc/mail/sendmail.mc > /etc/sendmail.cf

I would be extremely greatful to anyone that has any advice.

Thanks

Verbal

Just wanted to bump this once, as it got buried real quick. I still havn't been able to find a resolution for this issue.

Thanks,

Verbal

verbal,
If possible you really want to relay by IP. user@host.domain type keys in the access.db are only valid if the action is REJECT unless you have relay_mail_from set. For what you are trying to do I would recommend either SMTP AUTH or STARTTLS.

--jeremy

Jeremy,

Thanks for the reply. I had considered the use of network addresses originally, but had dismissed it as an option as the users in question have dynamic values, which brings me to setting ranges of addresses, which of course puts me back at square one

I had somehow missed the topic of "STARTTLS" in my readings, going to go read up on that now.

Thanks for the advice,

Verbal