Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Need an SMTP-level mail bouncer

6 views
Skip to first unread message

Gary Mills

unread,
Apr 9, 2008, 11:14:14 AM4/9/08
to
We currently have about 30,000 inactive accounts that are still in our
password map. These belong to former users who have left the
organization and are no longer eligible for an account. These
accounts should not receive e-mail. I have a cron command that runs
regularly to create aliases for these accounts. Each alias runs a
vacation-like auto-responder that informs a sender that the
recipient's account is no longer active.

I have some complaints of `backscatter' from this facility. Is there
a way that I can replace it with something that rejects a message at
the SMTP level? That would give the SMTP peer responsibility for
notifying the sender. I realize that I'd be limited to a a single
text string in the SMTP response, but I could include a URL there to
provide a more detailed explanation. Does sendmail have such an alias
facility?


--
-Gary Mills- -Unix Support- -U of M Academic Computing and Networking-

Andrzej Adam Filip

unread,
Apr 9, 2008, 11:46:22 AM4/9/08
to
Gary Mills <mi...@cc.umanitoba.ca> wrote:

0) You can use
former user alias -> short alias -> virtusertable entry -> custom error message
[It uses sendmail "as it is" and requires no new sendmail features ]

aliases file:
# map short "domainless" name to name with domain handled by virtusertable
FORMER: FORMER@localhost
# list of former users
no_loger_here_user_1: FORMER
no_loger_here_user_2: FORMER
...

virtusertable file:
# map special name to custom error message
FORMER@localhost error:nouser Former user no longer her

You can test it for one user using the commands below:
sendmail -bv no_loger_here_user_1
sendmail -d60.5 -d27.2 -bv no_loger_here_user_1

[the second produces more detailed output to troubleshoot problems]

1) You can create your own feature similar to FEATURE(`redirect')
cf/feature/redirect.m4 is a small file used to generate sendmail.cf

P.S.
You may consider appending URL link to the error message

--
[pl>en: Andrew] Andrzej Adam Filip an...@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
Work expands to fill the time available.
-- Cyril Northcote Parkinson, "The Economist", 1955

Gary Mills

unread,
Apr 9, 2008, 12:42:47 PM4/9/08
to
In <5bu3ru367...@joseph.fsf.hobby-site.com> Andrzej Adam Filip <an...@onet.eu> writes:

>Gary Mills <mi...@cc.umanitoba.ca> wrote:

>> I have some complaints of `backscatter' from this facility. Is there
>> a way that I can replace it with something that rejects a message at
>> the SMTP level? That would give the SMTP peer responsibility for
>> notifying the sender. I realize that I'd be limited to a a single
>> text string in the SMTP response, but I could include a URL there to
>> provide a more detailed explanation. Does sendmail have such an alias
>> facility?

>0) You can use
> former user alias -> short alias -> virtusertable entry -> custom error message
> [It uses sendmail "as it is" and requires no new sendmail features ]

Thanks for the suggestion. I'll try that.

D. Stussy

unread,
Apr 9, 2008, 10:11:28 PM4/9/08
to
"Gary Mills" <mi...@cc.umanitoba.ca> wrote in message
news:ftimg6$h0v$1...@canopus.cc.umanitoba.ca...

Why not REMOVE the accounts?


Tilman Schmidt

unread,
Apr 10, 2008, 6:37:31 AM4/10/08
to
Gary Mills schrieb:

> We currently have about 30,000 inactive accounts that are still in our
> password map. [...] These

> accounts should not receive e-mail.

I take it as given that there is a very good reason why these accounts
cannot be simply removed from the map.

> I have a cron command that runs
> regularly to create aliases for these accounts. Each alias runs a
> vacation-like auto-responder that informs a sender that the
> recipient's account is no longer active.
>
> I have some complaints of `backscatter' from this facility.

Quite understandably.

> Is there
> a way that I can replace it with something that rejects a message at
> the SMTP level?

Put lines like:

To:inactive...@your.doma.in ERROR:"550 5.7.1 Inactive account, see http://explanatory.page"

in your access DB. (Change the error code according to taste, mine
says "policy rejection", you might prefer "mailbox unavailable" or
something else still.)

HTH
T.

--
Please excuse my bad English/German/French/Greek/Cantonese/Klingon/...

Andrzej Adam Filip

unread,
Apr 10, 2008, 7:16:15 AM4/10/08
to
Tilman Schmidt <ts-use...@pxnet.com> wrote:

Your suggestion requires multiple access entries per one user if the
host handles many local domains e.g. example.com and host.example.com

--
[pl>en: Andrew] Andrzej Adam Filip an...@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/

He only knew his iron spine held up the sky -- he didn't realize his
brain had fallen to the ground.
-- The Book of Serenity

Message has been deleted

Tilman Schmidt

unread,
Apr 15, 2008, 8:47:35 AM4/15/08
to
Res schrieb:

> On Thu, 10 Apr 2008, Tilman Schmidt wrote:
>
>> To:inactive...@your.doma.in ERROR:"550 5.7.1 Inactive account, see http://explanatory.page"
>
> I agree with this, except, he should use simply To:inactive.account
> _without_ a domain, ie:
>
> To:res ERROR:"550 5.7.1 Inactive account, see http://explanatory.page"

Depends on the domain setup. My proposal is geared for the situation
where addresses with the same local part in different domains may refer
to different mail accounts. Yours is better suited to the case where a
given local part refers to the same account in all domains.

0 new messages