Koozali.org: home of the SME Server

restrict to internal email

Allen Rapini

restrict to internal email
« on: January 10, 2002, 07:12:53 PM »
I would have sworn that I saw this in the past, but I can't find it all now.
What I would like to do is prevent a group of users from sending email outside the domain.
I am adding users, and I can set the property "Visible internal" correctly.

I thought it was a config option, but if I can't do it via " /sbin/e-smith/db /home/e-smith/accounts setprop $account $value", can I make the changes manually to check_smtpd_rules?

Thanks in advance for any input.

Allen

Filippo Carletti

Re: restrict to internal email
« Reply #1 on: January 11, 2002, 01:11:05 AM »
Visible internal blocks mail coming from outside.
You have to block mail from inside, right ?
I'd add a property to each restricted account and modify smtpd_check_rules template.
I have something nearly ready, drop me an email as a remainder.

Allen Rapini

Re: restrict to internal email
« Reply #2 on: January 11, 2002, 08:15:35 PM »
I have another additonal question, relating to the setting of the values using /sbin/e-smith/db /home/e-smith/accounts setprop $account $value".
When I try to set a group level value, it assigns it as a user level value instead.

Since I have no user by that name, the resulting expanded check_smtpd_rules has an entry in  the section "# Prohibit access to these addresses from the outside world " with no corresponding user.

Am I using the syntax correctly, or do you define a group wide setting differently?

Allen Rapini

Re: restrict to internal email
« Reply #3 on: January 11, 2002, 08:34:47 PM »
Well, it's more than anyone needs to know, but my searching has raised a few more questions.

Group membership is not enough to create a modified check_smtpd_rules file, since the ruleset seems to be based on username level checking.
Additonally, the ruleset needs to account for pseudonyms, and add/remove them correctly as well.
This means that the correct action to make the entries would compile a list of the "restricted" users and their psudonyms, and then pass that to set the account's value, followed by a console-save.

Ideally, the same compiled list is used to set both values.

Emmanuel Divina

Re: restrict to internal email
« Reply #4 on: March 14, 2002, 06:27:04 AM »
Can you send me some instruction too.