We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this? I need a flexible and fast method that can be done anytime, ie, on the fly when I am notified that an employee is being terminated. Thanks, CC
On September 6, 2001 06:54 pm, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
I need a flexible and fast method that can be done anytime, ie, on the fly when I am notified that an employee is being terminated.
Just add the IP to /etc/mail/access with a REJECT [You could use Discard instead] Then makemap hash /etc/mail/access < /etc/mail/access Nick
If you're in a hurry ipchains -I input 1 -s ip.of.machine --dport 25 -j DENY otherwise there's a file in /etc/mail called access, that I think is for this purpose, but you're supposed to build /etc/mail/access.db with it and I haven't figured out how to do that yet. regards Anders On Thursday 06 September 2001 20.54, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
I need a flexible and fast method that can be done anytime, ie, on the fly when I am notified that an employee is being terminated.
Thanks, CC
makemap hash /etc/mail/access < /etc/mail/access same for virtusertable and virtusertable.db and all the other db files in /etc/mail/ On Thu, 6 Sep 2001, Anders Johansson wrote:
If you're in a hurry
ipchains -I input 1 -s ip.of.machine --dport 25 -j DENY
otherwise there's a file in /etc/mail called access, that I think is for this purpose, but you're supposed to build /etc/mail/access.db with it and I haven't figured out how to do that yet.
regards Anders
On Thursday 06 September 2001 20.54, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
I need a flexible and fast method that can be done anytime, ie, on the fly when I am notified that an employee is being terminated.
Thanks, CC
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
Thanks for the help. I just figured out the access.db file. After changes to /etc/mail/access, you run this command: cd /etc/mail makemap hash access < access This worked for me. Thanks, CC -----Original Message----- From: Anders Johansson [mailto:andjoh@cicada.linux-site.net] Sent: Thursday, September 06, 2001 12:03 PM To: Chuck; suse-linux-e@suse.com Subject: Re: [SLE] Preventing a single IP from sending mail If you're in a hurry ipchains -I input 1 -s ip.of.machine --dport 25 -j DENY otherwise there's a file in /etc/mail called access, that I think is for this purpose, but you're supposed to build /etc/mail/access.db with it and I haven't figured out how to do that yet. regards Anders On Thursday 06 September 2001 20.54, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to
prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
I need a flexible and fast method that can be done anytime, ie, on the
fly when I am notified that an employee is being terminated.
Thanks, CC
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
On Thu, Sep 06, 2001 at 11:54:11AM -0700, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
1) block IP on port 25 in a firewall rule, i.e. block on kernel level 2) block IP in config of your mailer, i.e. block on application level What mailer are you using? I only kown Postfix. Regards, Cees.
assuming you are using sendmail add the ip address to /etc/mail/access like 192.168.1.57 REJECT and then do makemap hash /etc/mail/access < /etc/mail/access and that should be it or you could drop in an ipchains rule to prevent access to port 25 from that ip on the server (if you have ipchains in the kernel on that server) On Thu, 6 Sep 2001, Chuck wrote:
We are using a SuSE 70 machine as our corporate mail server. I need to prevent a single IP address from being able to send mail through the server. What is the easiest way to do this?
I need a flexible and fast method that can be done anytime, ie, on the fly when I am notified that an employee is being terminated.
Thanks, CC
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
participants (5)
-
Anders Johansson -
Cees van de Griend -
Chuck -
dog＠intop.net -
Nick Zentena