Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Sender OK

Status
Not open for further replies.

theguru97321

IS-IT--Management
Feb 3, 2003
216
US
I host 10 email domains off a single linux server.

ORDB has just told me I'm open (haven't been for years) but now they say I am.

I tested, seems to be true. How do I either force authentication with sendmail, or set it to know that the USER must exist in server to allow a mail to be sent as them?

 
alright, I've denied all relaying from my domains, and added ALL 100 of my users to the allowed relay. this is a very stupid way to do it.

it there a way in SendMail to do the 'server requires authentication' in the outlook programs.

my exchange server does....
 
Is the following in your access file
localhost RELAY
localhost.localdomain RELAY
This will allow only "local" users to send mail outside (or locally)

There is no God, only 10001010
 
No, nothing to do with Localhost is in my sendmail properties.

what makes someone 'local'?

none of my clients are on my local network, they're all on outside networks. they just use POP3 and some use a web interface.
 
I assume they have valid email/user accounts on your linux box. Then wouldn't your linux box consider them local users ?

There is no God, only 10001010
 
I dunno. Is that how it works? Is this as close to requiring authentication as it gets?
 
I removed my user from relaying rules, and added localhost and localhost.localdomain as relayable, didn't allow because mydomain.com is rejected. I removed mydomain.com from the reject list, and was able to send as a fake user

So this won't work for me.
 
In version 8.12 & higher of sendmail you can use STARTTLS (you must compile sendmail with STARTTLS support) which gives you the ability to use separate certificates, one for the server(accept connections) and one for the client (make connections) to control who and how your mail server is accessed.
You can look at PAM (the password authentication module) also in versions 8.10 & higher (maybe in 8.9 but I am not sure).

There is no God, only 10001010
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top