[comp.mail.sendmail] Restricting gateway mail

ehrlich@cs.psu.edu (Dan Ehrlich) (01/10/91)

Hello all,

We need to be able to restrict who we gateway mail for.  I have a known
short list of domain names that the authorized hosts will be in.  Basically
I need to make sure that either the from address or the to address is at one
of these hosts.

Has anyone else done this?  Is it even reasonable to attempt with sendmail
or one of its variants?  Does anyone have any suggestions on how I should
proceed?

Thanks in advance.
--
Dan Ehrlich - Sr. Systems Programmer - Penn State Computer Science
<ehrlich@cs.psu.edu>/Voice: +1 814 863 1142/FAX: +1 814 865 3176

anselmo-ed@CS.YALE.EDU (Ed Anselmo) (01/10/91)

An ancient hack (dating from the 9600 baud fuzzball days when they
didn't allow everyone to send ARPANET mail) at Yale CS enables the
checkcompat() routine in conf.c.  The default configuration simply
returns TRUE.  Returning FALSE from checkcompat() results in
EX_UNAVAILABLE errors.

Comments from the code follow:

** YALEACCESS -- The routine used to check if the sender is allowed
**               to send mail out to the ARPA Internet.
**
**      The following algorithm is used to determine if the sender
**      is allowed access:
**
**          1) If the destination address is not an ARPA address, or if
**             it is YALE.ARPA, access is automatically allowed.
**          2) If the sender address is an ARPA address other than YALE,
**             access is automatiically allowed.
**          3) Otherwise (i.e.  if the destination is an ARPA address
**             other than YALE, and the sender address is a non-ARPA
**             address or a YALE.ARPA address), then access is checked
**             by seeing if the sender address is listed in the ARPA
**             access file.
**
-- 
Ed Anselmo   anselmo-ed@cs.yale.edu   {harvard,cmcl2}!yale!anselmo-ed