John Conover <[EMAIL PROTECTED]> writes on 6 February 2000 at 01:21:38 -0000
> I haven't tried it against orbs, but, for the mail server's IP being
> 123.321.123.321 and a client's 123.321.123.322:
>
> :deny
> 127.:allow,RELAYCLIENT=""
> 123.321.123.321:allow
> 123.321.123.322:allow,RELAYCLIENT=""
>
> which came from someone on this list. Could this be verified as
> correct?
You don't want the :deny; that will prevent anybody else from
connecting to deliver mail *at all*, even mail directed to your
users. And you want to set relayclient for the server itself by IP,
as well as the server itself by localhost IP.
My tcp.smtp looks like this:
# tcpcontrol(8) rules for qmail smtp daemon
#
# In general, anywhere I want to allow relaying from, I probably want
# to ignore spamblocks too.
# Allow relaying from my own addresses -- at gofast (dead now)
# 206.147.220.161-165:allow,RELAYCLIENT="",RBLSMTPD=""
#
# Blaisdell poly USWest static addresses
63.224.10.73-78:allow,RELAYCLIENT="",RBLSMTPD=""
#
# Lydy at work (All of MultiLogic, really used just by Lydy)
206.144.140.:allow,RELAYCLIENT="",RBLSMTPD=""
#
# Blaisdell Poly internal private addresses
10.:allow,RELAYCLIENT="",RBLSMTPD=""
#
# Override ORBS/RBL for a few hosts, at least for now
# The hockey.net domain
209.98.94.1-8:allow,RBLSMTPD=""
# mail.gunnison.com, for Kara Dalkey
199.190.87.30:allow,RBLSMTPD=""
# icicle.winternet.com, for Geri 11/16/1999
198.174.169.13:allow,RBLSMTPD=""
#
# Finally, allow anything else, but without relaying
# (Domains to refuse entirely would go above this)
:allow
--
Photos: http://dd-b.lighthunters.net/ Minicon: http://www.mnstf.org/minicon
Bookworms: http://ouroboros.demesne.com/ SF: http://www.dd-b.net/dd-b
David Dyer-Bennet / Welcome to the future! / [EMAIL PROTECTED]
