FWIW. I just did something similar (thus the late answer). Gateway is openbsd+sendmail configured with a local_rule_0 in order to send everything @outdomain.com to the internal host. Filtering is done in this way: 1) script, directory export of every container, parse out all smtp addresses, filter as you like, construct text file in format "[EMAIL PROTECTED] DOACCEPT" one address per line. Copy to sendmail server periodically. 2) create sendmail hash map: makemap hash internalsmtp.db < internalsmtp 3) define datasource in sendmail cf with Kprevinternal hash /etc/mail/previnternal 4) filter addresses in the Scheck_rcpt macro. Some lines will wrap:
# Only selected previnet address can receive mail #A) mark addresses with leading <?> R$* $: <?> $1 #B) if <?> [EMAIL PROTECTED] change into <@> [EMAIL PROTECTED] $| <content of hash if present or [EMAIL PROTECTED]> R<?> $+ < @ ourdomain.com > $: <@> <$1 @ ourdomain.com > $| $(internalsmtp $1 @ outdomain.com $) #C) if DOACCEPT clean stuff and return [EMAIL PROTECTED] R<@> <$*> $| DOACCEPT $: $1 #D) if not it was not present, invalid addr, return error R<@> <$*> $| $* $#error $@ 5.2.1 $: "550 Address does not exist" #cleanup R<@> <$*> $| $* $: $1 Any comments are welcome, I'm not exactly a sendmail guru. Heiko -- -- PREVINET S.p.A. www.previnet.it -- Heiko Herold [EMAIL PROTECTED] [EMAIL PROTECTED] -- +39-041-5907073 ph -- +39-041-5907472 fax > -----Original Message----- > From: Orin Rehorst [mailto:[EMAIL PROTECTED] > Sent: Friday, June 18, 2004 4:24 PM > To: Exchange Discussions > Subject: Evil Email > > > We want to deflect emails with incorrect addresses before > reaching the Exchange server. Our chain is eDoxs, server with > Interscan, then E2K. Want to insert server or appliance > between eDoxs and Interscan server that uses AD to check for > legit email adresses. Any recommendations? > > TIA > > Orin Rehorst > > -----Original Message----- > From: Chinnery, Paul [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 17, 2004 12:05 PM > To: Exchange Discussions > Subject: RE: Evil Spam > > > I'd guess that the reciepient is in the BCC field. > > Paul Chinnery > Network Administrator > Mem Med Ctr > > > -----Original Message----- > From: McCready, Robert [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 17, 2004 12:58 PM > To: Exchange Discussions > Subject: Evil Spam > > > Is there any way to check (in Exchange 5.5) the actual > intended recipient of > an email? We have some spam coming in that says it's addressed to > [EMAIL PROTECTED] That address does not exist. > However, the > mail is being delivered to one of our employees. So, the > evil spammer must > be disguising the TO: field. I'd like to find out if the > intended recipient > is actually the lady receiving the email, or if it is being > autoforwarded > after coming into another mailbox at the company. Somewhere, > the email has > to have the actual intended recipient listed, I just don't > know where to > find it. > > Thanks. > > Robert > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
