stoping mail from unwanteds for the whole site

[Peter Stubbs]

Hi All,

I'm using mercury NDS Beta2, and pmail for the smtp mail at my site.
We are an all girls school, and give the students (almost) free access
to the internet. It seems that we've attracted some rather unsavory
types who are now sending explicit messages to some of our students.

I'd love to be able to get mercury to not deliver any mail from
le...@buggery.edu to anyone, but I can't see how. Does anyone have any
idea how to do this?

The mail goes through our internet gateway which uses sendmail to
deliver it, perhaps that's a place I could try.

TIA,
Peter

Peter Stubbs, St Aidan's AGS.
ph +61-07-3379-9911, fax +61-07-3379-9432
mailto:pet...@staidan.qld.edu.au
http://www.staidan.qld.edu.au

[Thomas R. Stephenson]

You can reject all traffic from a particular site by using the
reject parameter under [MercuryS] in the mercury.ini file. You
would just use the IP address for le...@buggery.com. This works
quite well where mail is being sent directly to you server, doesn't
work so well when being re-routed through a mail server. I have
found a better solution is to send a polite note to the postmaster
of the site, a few message samples and the user names, explaining
the he has some users that are violating proper use of the Internet
prior to clobbering the entire site.

Thomas R. Stephenson, CPL Phone: (408) 753-6608
Lockheed Martin Technical Operations Fax: (408) 753-0681
Milstar Integrated Logistics Support M2-20 B/158
Net: tstep...@lmsc.lockheed.com
Member of Pegasus Mail Support Team

Thought for the day:
Intuition (n): an uncanny sixth sense which tells people
that they are right, whether they are or not.

[Peter Gross]

Peter Stubbs <PET...@STAIDAN.QLD.EDU.AU> wrote:

>Hi All,

>I'm using mercury NDS Beta2, and pmail for the smtp mail at my site.
>We are an all girls school, and give the students (almost) free access
>to the internet. It seems that we've attracted some rather unsavory
>types who are now sending explicit messages to some of our students.

>I'd love to be able to get mercury to not deliver any mail from
>le...@buggery.edu to anyone, but I can't see how. Does anyone have any
>idea how to do this?

>The mail goes through our internet gateway which uses sendmail to
>deliver it, perhaps that's a place I could try.

Here is how to do this in sendmail (taken from comp.mail.sendmail):

From: c...@informatik.uni-kiel.de (Claus Assmann)
Newsgroups: comp.mail.sendmail
Subject: Re: Can sendmail refuse mail from certain domains
Date: 28 Aug 1996 08:45:14 +0200
Organization: Dept. of Computer Science, University of Kiel, FRG
Lines: 49
Message-ID: <500ptq$9...@mine.informatik.uni-kiel.de>
References: <4vlatp$8...@atglab10.atglab.bls.com>
<322371...@math.ucla.edu>
NNTP-Posting-Host: mine.informatik.uni-kiel.de

In <322371...@math.ucla.edu> "David D. Faraldo II"
<da...@math.ucla.edu> writes:

>Mike Richards wrote:
>>
>> Is there a configuration option (sendmail.cf) or rule to drop mail
>> from a specific domain, e.g. From: drop...@dropdom.com. I want
>> to drop all mail from @dropdom.com at the sendmail/relay level.

>Did you ever get a response from this one? I'm working on the same problem
>myself.

Ok, here it goes:

4) How do I refuse e-mail from unwanted domains (users)?

If you have sendmail 8, you can do the following to refuse mails from
unwanted hosts/domains:

Put into ruleset 98 something like: (this is LOCAL_RULE_0 in your .mc
file)
R$* < @$*$=K . > $* $#error $@ 5.7.1 $: "This domain is banned."
R$* < @$*$=K > $* $#error $@ 5.7.1 $: "This domain is banned."
And define a class K by:
FK /etc/banned.domains
In this file, you should put the names of the banned domains, e.g.,
moneyworld.com

If you want to specify the user(s) too, you have to replace the first
$* with the name or a match for a class.

Another possibility is to use tcp_wrappers. There is a patch
(avalailble at ftp.informatik.uni-kiel.de
/pub/sources/security/MIRROR.ftp.win.tue.nl/sendmail-tcpd.patch.gz) for
sendmail 8.7.5, which incorporates the functionality directly into
sendmail. Using this approach, you can define the access to your
sendmail daemon based on the rules available for tcp_wrappers.

If you have any corrections/additions/suggestions, please let me know.
These questions and answers are also available on
http://www.informatik.uni-kiel.de/%7Eca/email/english.html
which contains some more hints about sendmail.

Hope this help,

Claus Assmann
--
On-line, adj.: The idea that a human being should always be accessible
to a computer. --- /usr/games/fortune
<URL:http://www.informatik.uni-kiel.de/%7Eca/>
--
peter gross
p...@gpf.scg.boulder.co.us
+1.303.440.5520