Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 6 Jan 2000 11:52:27 -0800 (PST)
From:      David Wolfskill <dhw@whistle.com>
To:        mitayai@bricsnet.com
Cc:        freebsd-stable@FreeBSD.ORG
Subject:   RE: Sendmail, 3.3-STABLE, relaying
Message-ID:  <200001061952.LAA11979@pau-amma.whistle.com>
In-Reply-To: <NDBBIBPPALJNCAALNFFAOEGCCGAA.mitayai@bricsnet.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>From: "Will Mitayai Keeso Rowe" <mitayai@bricsnet.com>
>Date: Thu, 6 Jan 2000 14:43:19 -0500

>ok, so how would i deny access to an entire C-Class?

Quoting from /usr/src/contrib/sendmail/cf/README, beginning at line
1276:

An ``access'' database can be created to accept or reject mail from
selected domains.  For example, you may choose to reject all mail
originating from known spammers.  To enable such a database, use

	FEATURE(access_db)

The FEATURE macro can accept a second parameter giving the key file
definition for the database; for example

	FEATURE(access_db, hash -o /etc/mail/access)

Remember, since /etc/mail/access is a database, after creating the text
file as described below, you must use makemap to create the database
map.  For example:

makemap hash /etc/mail/access < /etc/mail/access

The table itself uses e-mail addresses, domain names, and network
numbers as keys.  For example,

	spammer@aol.com		REJECT
	cyberspammer.com	REJECT
	192.168.212		REJECT

would refuse mail from spammer@aol.com, any user from cyberspammer.com
(or any host within the cyberspammer.com domain), and any host on the
192.168.212.* network.

The value part of the map can contain:

	OK		Accept mail even if other rules in the
			running ruleset would reject it, for example,
			if the domain name is unresolvable.
	RELAY		Accept mail addressed to the indicated domain or
			received from the indicated domain for relaying
			through your SMTP server.  RELAY also serves as
			an implicit OK for the other checks.
	REJECT		Reject the sender or recipient with a general
			purpose message.
	DISCARD		Discard the message completely using the
....



Please note that the example given would cause attempts to establish a
SMTP connection form anywhere in the class C 192.168.212.0/24 to be
rejected (as the quoted text indicates).

Cheers,
david
-- 
David Wolfskill		dhw@whistle.com		UNIX System Administrator
voice: (650) 577-7158	pager: (888) 347-0197	FAX: (650) 372-5915


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001061952.LAA11979>