-----Original Message-----
From: Brian T Glenn [mailto:[EMAIL PROTECTED] 
Sent: Saturday, January 21, 2006 17:45
To: [email protected]
Subject: Re: rcpthosts

On Fri, Jan 20, 2006 at 01:13:25PM -0600, Corbey, Clayton may have
written:
>> Why doesn qmail-ldap not do lookups for all hosts in rcpthosts?
>>  
>> None of my users are on the qmail system, or a qmail system for that
>> matter. I want the lookups to be done and then the email forwaded (if
>> the lookup succedeed) to another server(Exchange, boo) internally
after
>> that. How can I configure qmail-ldap to do this?

>If all you want is a dumb relay server to scan mail for viruses, spam, 
>etc., then send that mail to a backend, you will either need to make 
>qmail-ldap talk to your Active Directory (unlikely, but theoretically 
>possible), write a program to migrate users into OpenLDAP from AD, or 
>just use stock qmail as a relay server with rcpthosts and smtproutes.
>
>Cheers,
>-- 
>Brian T Glenn
>delink.net Internet Services

I have achieved the unlikely but theoretically possible. My qmail works
exactly how you describe.

My 'dumb' server does all the scanning and then moves the email into the
server where the users store is located.

Now I want to do a lookup at the smtp level to reject email for invalid
users.

What I don't understand is why this is such a 'funny' or 'non standard'
way of doing things. Why can qmail-ldap do a lookup via another server
but won't function unless the user is located on the system it's running
on? If your rcpthosts file contains the domain, then who cares if locals
doesn't. It should treat them as the same; after all you are accepting
'their' email.

It does the lookup on my internal PDC, then fails with a 451 saying the
user is forward only (or LDAP lookup failed temporarily). Yeah, so,
forward it then, look at my smtproutes and forward it; it only does this
if I have LDAPSOFTOK set. Then it forwards EVERYTHING!

As for using stock qmail, I don't want to, I want to scan for email that
is going to valid users; I want to make sure that the user is actually
there first before I accept the email. Stock qmail already got my server
tagged by SORBS; hence I'm trying to fix it now.

Any more ideas, please!?!?!?!!

-Clayton

Reply via email to