Allow Relay Based Upon Authentication and Not IP

[System Administrator - Jeff]

Hello All

I currently have a computer with RedHat Linux 9 configured to be a mail
server. I have updated to the latest sendmail via the RedHat Network
(up2date) for security and the like patches.

This server is configured to be a mail server for the multiple websites we
will be hosting. I have all the necessary files configured to accept mail
for multiple domains, but there are two problems I am experiencing.
1. Allowing relay service for our clients.
Currently, we do not allow our customers to send their outgoing mail through
our servers because sendmail's relay configurations only use IP/Domain names
to allow this. I can't put our customer's IP/Domians here because a couple
of them have multiple dialup accounts with traveling sales people.
How do I modify sendmail to allow relaying once the user authentiacates
him/herself using their username and password.

2. Allowing each domain to have generic accounts
for example:
sa...@domain1.com should route to a sales account on the server
sa...@domain2.com should also route to a sales account on the server but for
a different client.

I can get this to work through aliases on the server
sa...@domain1.com -> sales
sa...@domain2.com -> tom
sa...@domain3.com -> barry

This solution still requires the user to log in using their accounts (tom,
barry, sales, etc.), and what if my customer who owns domain3.com only wants
their account to be sa...@domain3.com and not a name

Thanks for your help
Jeff - System Administrator

[System Administrator - Jeff]

Thanks for the help with the accounts. Any ideas/suggestions for the mail
relay question?

Jeff

"Brad Olin" <b...@bwo1.com> wrote in message
news:2bg720pil2qegqv2l...@4ax.com...

> On Fri, 06 Feb 2004 16:11:55 GMT, "System Administrator - Jeff"
> <sysa...@myDomain.com> wrote:
>
> >Hello All
> >
> >I currently have a computer with RedHat Linux 9 configured to be a mail
> >server. I have updated to the latest sendmail via the RedHat Network
> >(up2date) for security and the like patches.
> >
> >This server is configured to be a mail server for the multiple websites
we
> >will be hosting. I have all the necessary files configured to accept
mail
> >for multiple domains, but there are two problems I am experiencing.
> >1. Allowing relay service for our clients.
> >Currently, we do not allow our customers to send their outgoing mail
through
> >our servers because sendmail's relay configurations only use IP/Domain
names
> >to allow this. I can't put our customer's IP/Domians here because a
couple
> >of them have multiple dialup accounts with traveling sales people.
> >How do I modify sendmail to allow relaying once the user authentiacates
> >him/herself using their username and password.
> >

> Have a look at... http://www.sendmail.org/~ca/email/auth.html

>
> >2. Allowing each domain to have generic accounts
> >for example:
> >sa...@domain1.com should route to a sales account on the server
> >sa...@domain2.com should also route to a sales account on the server but
for
> >a different client.
> >

> setup a diff accounts for each, i.e.
> useradd -g mail_usr -d /home/mail_usr -s /sbin/nologin dom1_sales
> useradd -g mail_usr -d /home/mail_usr -s /sbin/nologin dom2_sales
>
> Then edit your /etc/mail/virtusertable and make entries like...
> sa...@domain1.com dom1_sales
> sa...@domain2.com dom2_sales

>
>
> >I can get this to work through aliases on the server
> >sa...@domain1.com -> sales
> >sa...@domain2.com -> tom
> >sa...@domain3.com -> barry
> >

> you can also get dup delivery via the /etc/aliases via entries like...
> dom1_sales_cc: dom1_sales, tom, barry
> dom2_sales_cc: dom2_sales, bill, mary
>
> For this dup to work, your virtusertable should use the alias...
> sa...@domain1.com dom1_sales_cc
> sa...@domain2.com dom2_sales_cc
>
>
> Brad
> --
> "Told by an idiot, full of sound and fury"
> Bradley W. Olin Shakespeare (Macbeth)
> http://www.bwo1.com