relay question (was: badmailfrom the right way)

[Philipp Lopaur]

i know i have asked this before, but got no responses yet,
so i simplify my question a little bit and hope for an answer.

how can i deny mail from outside with envelope
FROM: 123@mydomain
RCPT: 456@mydomain
(in the case 123 and 456 are valid mailboxes)

currently i have tcpserver with RELAYCLIENT and
an entry in badmailfrom: @mydomain

is this optimal?
can qmail end the session after MAIL FROM: ?
(now it does after RCPT TO)

my setup:

INTERNET
|
QMAIL SERVER (2 Interfaces, qmail-1.03 - qmailqueue and spamcontrol patch)
|
PRIVATE NETWORK

i am switching to qmail from sendmail because got sick of 
obscure .cf files. qmail is cleaner in design than sendmail and therefore
easier to understand. -> security benefit. 

thanks

btw. topic of the mailinglist is QMAIL right ?

--
Philipp Lopaur

Someone please BAN Spammers

[Philipp Lopaur]

Hi!

Can someone please BAN those annoying spam,

and dumb Exchange Scanmailprograms ?
 
This is getting unacceptable! - The list is unusable.
 
 thanks in advance
 
 --
 Philipp Lopaur

QUESTION: Is badmailfrom the right way ?

[Philipp Lopaur]

Hi

i have following setup:

INTERNET
|
LINUX QMAIL SERVER (2 Interfaces, internal mail.intra.xxx.com, external
mail.xxx.com)
|
PRIVATE NETWORK
|
Exchange Server

server should accept all mails for *@xxx.com and route it to Exchange Server
i dont want *@mail.xxx.com emails to be accepted, alerts or similar local
originated
mail should go to a local account or to [EMAIL PROTECTED]

So i have following configfiles

control/smtproutes:
xxx.com:exchange

control/me:
mail.xxx.com

control/defaultdomain:
xxx.com

contol/localiphost:
xxx.com

control/locals:
mail.xxx.com
localhost

control/rcpthosts:
xxx.com

control/badmailfrom:
xxx.com

i also have configured tcpserver to ,RELAYCLIENT="" in the case the ip
address
is of my local private subnet.

i am running qmail-1.03 with SPAMCONTROL and QMAILQUEUE patch.
i also run qmail-scanner.

MY PROBLEM:

i HAVE TO dissallow mails with originator in internet (external interface),
with envelope

MAIL FROM: [EMAIL PROTECTED]
RCPT TO: [EMAIL PROTECTED]

headers should also be checked against this

QUESTION:

is badmailfrom the right way to do this ?

is there a way to deny the message after the MAIL FROM: ?
currently it is denied after RCPT TO:

are my configfiles optimal for my case ? how can i tune them for optimal
function?

what configfiles are redundant ?

i found out that this is a common problem with many internet smtp sites!
this should make it into the ./config script, and into the FAQ!

thanks in advance

--
Philipp Lopaur