[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

remote user checking (via ldap) in smtpserver (was: Re: rejecting unknown users)



I don't know if this is unique to our usual setups and if at all 
possible, but... we currently deploy zmailer servers as border gateways 
with no users. What's more, we use separate smtpservers (some times on 
different equipment, some times on the same hard, with separate IPs) for 
MX reception and for outbound mail relay.

For incoming-only (MX) servers, as we don't have the users locally, it is 
pointless to enable-router. But usually, we have access to the internal 
server user database via LDAP (e.g. an Exchange or MCIS server with 
ActiveDirectory).

It'd be really nice to be able to issue an LDAP query at "RCPT TO:" time 
and be able to answer "unknown user" based on that query.

Is this possible (or at least doable, somehow)?

TIA.

El 9 Nov 2003 a las 19:08, Roy Bixler escribió:

> On Sun, Nov 09, 2003 at 05:38:02PM -0500, Rik van Riel wrote:
> > On Fri, 7 Nov 2003, Damir Horvat wrote:
> > 
> > > I'm freshmen with zmailer and em annoyed with the fact, that I just
> > > can't figure out how to reject mail for unknown users.
> > 
> > This is a big issue.  I really need to get this up and
> > running because with all the forged spam and virusses
> > being sent around it is simply irresponsible to accept
> > all mail and bounce the nondeliverables...
> 
> This is documented at
> "http://www.zmailer.org/zman/zadm-smtpserver.shtml".  You need to turn
> on the "enable-router" option and then set the appropriate "EHLO-style
> options" for checking "from" addresses, "to" addresses or both.  The
> default "smtpserver.conf" file contains comments which should help you
> do this.
> 

--
Mariano Absatz
El Baby
----------------------------------------------------------
Programming is a Dark Art, and it will always be. The programmer is
fighting against the two most destructive forces in the universe:
entropy and human stupidity. They're not things you can always
overcome with a "methodology" or on a schedule.
        -- Damian Conway, Perl Guru


-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi