A low maintanence/med cost option is something like mimesweeper, which as I
understand it has LDAP intergration as does exchange 5.5
{quote from msw user guide}
http://www.mimesweeper.com
LDAP address lists
MAILsweeper for SMTP software can use address lists built from an LDAP
directory. This provides automatic access to user information stored and
managed in a central directory. LDAP address lists provide a simple
mechanism for specifying an organizational group.
To maximize efficiency, MAILsweeper builds a cache of the members of
the address list when the Security Service is started. The contents of this
cache are refreshed at specified intervals. This refresh period should
reflect
the frequency with which changes are made to the contents of the LDAP
directory.
{/quote from msw user guide}
never done it , just know it exists......
you could set up two distribution lists in exchange , one allowed to send
one not and set a rule(s) in mimesweeper accordingly
Also have a look at the thread [FW1] LDAP Integration on this mailing list
cheers
deanc
> -----Original Message-----
> From: Daniel Bocage [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, June 25, 2000 6:13 AM
> To: Robert MacDonald
> Cc: [EMAIL PROTECTED]; THELLIER,
> Francis (Kedros)
> Subject: Re: [FW1] SMTP per user
>
>
>
> Thankyou for your answers, what I meant was this:
>
> Some of our users will not be given permission to
> send/receive mail from
> Internet. How can I block them at the FW-1 (I couldn't find a
> way to do
> it on the Exchange 5.5 server)?
> For example I could write a huge list in the Recipients field
> of the SMTP
> resource but it would be impossible to manage (About 400
> users can send
> and 200 can't).
> Is there a way to obtain this list from an LDAP server for example?
>
> I share your idea about the policy but the managers are
> convinced that
> is the right way to go, so unless technically it's too complicated or
> difficult to manage they want to go for it.
>
> thanks,
> Ing. Daniel Bocage
>
> Robert MacDonald wrote:
>
> > Daniel,
> >
> > Your request is not very clear, but I'll try and
> > make some assumptions(ack!).
> >
> > If intention is to limit the number of emails
> > that an internal user may get, get/send, send,
> > then you'll most likely end up writing some
> > cludge script to accomplish this. This would
> > appear to be real nasty. Unless there are
> > packages out there that do this, I don't
> > think it's possible without a lot of work.
> >
> > If the intention is to limit the number of emails
> > someone can inject into your site, then sort-of.
> > FW-1 has a config that can do this. But then
> > if someone really wanted to send email into
> > your site, they can just break your site into
> > chunks.
> >
> > If I were you, I would look through that policy
> > you have and remind all offenders/abusers
> > of your mail system about non-work related
> > email usage.
> >
> > Then, if they continue, feel free to cut them
> > off, becuase your policy's abuse clause said so.
> >
> > Use technology to fix technological issues. Use
> > common sense and a thick, heavy policy for
> > all else ;).
> >
> > Robert
> >
> > - -
> > Robert P. MacDonald, Network Engineer
> > e-Business Infrastructure
> > G o r d o n F o o d S e r v i c e
> > Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
> >
> > >>> "Daniel Bocage" <[EMAIL PROTECTED]> 6/23/00 10:10:09 AM >>>
> > >
> > >How can I limit incoming and outgoing mail (SMTP) per user
> on a FW-1
> > >gateway?
> > >
> > >thanks,
> > >
> > > Ing. Daniel Bocage
>
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
***************************************************
This e-mail is not an official statement of the
Waikato Regional Council unless otherwise stated.
Visit our website http://www.ew.govt.nz
***************************************************
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================