From owner-freebsd-questions  Wed Jan 21 19:59:12 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA06649
          for questions-outgoing; Wed, 21 Jan 1998 19:59:12 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: (from jmb@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id TAA06643;
          Wed, 21 Jan 1998 19:59:08 -0800 (PST)
          (envelope-from jmb)
From: "Jonathan M. Bresler" <jmb>
Message-Id: <199801220359.TAA06643@hub.freebsd.org>
Subject: Re: Preventing spam relaying
In-Reply-To: <Pine.BSF.3.95q.980121211850.1742A-100000@federation.addy.com> from Cliff Addy at "Jan 21, 98 09:24:08 pm"
To: fbsdlist@federation.addy.com (Cliff Addy)
Date: Wed, 21 Jan 1998 19:59:06 -0800 (PST)
Cc: questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL32 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk


	put all the machines that are allowed to relay (those running
	netscape) in the "R" class.......
	list them in /etc/sendmail.cf.relays
jmb

Cliff Addy wrote:
> OK, I FINALLY got the relay prevention stuff to reject relaying with :
> 
>  #LOCAL_CONFIG
>  FR-o /etc/sendmail.cf.relays
> 
>  #LOCAL_RULESETS
>  Scheck_rcpt
>  # anything terminating locally is ok
>  R< $+ @ $=w >  $@ OK
>  R< $+ @ $=R >  $@ OK
> 
>  # anything originating locally is ok
>  R$*   $: $(dequote "" $&{client_name} $)
>  R$=w  $@ OK
>  R$=R  $@ OK
>  R$@   $@ OK 
> 
>  # anything else is bogus 
>  R$*   $#error $: "550 Relaying Denied"
> 
> However, it's too good now.  I need OUR clients to be able to send email
> and it's getting blocked.  I didn't realize that Netscape talks directly
> to the sendmail port, I just assumed it used the POP server.  Is there any
> way I can work around this?  I'm tired of abusive email from people who've
> been spammed and seeing hundreds of messages queued up on our servers, but
> have to let our clients send email.  Can NS be configured to send email
> through the pop server?
> 
> Very tiredly yours, 
> 
> Cliff
> 
> 
>