forgering exception

Hi,
I have a MX only server and I have set up the following in /etc/mai/
access:

From: example.com error:554:No forgering please
To: example.com RELAY


So, I refuse mail from Internet claming to be from my domain. Of
course I accept mail to my domain.
Now the problem. I would want to accept mail coming from specific IP
address with mail from: my domain.

I tried to add like first line

x.x.x.x RELAY

where x.x.x.x is the specific IP that I want to let to send mail using
my domain like mail from:

This obviously doesn't work, so I'm asking you if some expert can help
me providing the way to do this.

Thanks
Quartex Quartex [ Mo, 07 April 2008 17:49 ] [ ID #1937581 ]

Re: forgering exception

<quartex73 [at] gmail.com> wrote in message
news:e4999046-66bf-4b71-a0ea-9ba40d3f50d3 [at] k1g2000prb.googleg roups.com...
> Hi,
> I have a MX only server and I have set up the following in /etc/mai/
> access:
>
> From: example.com error:554:No forgering please
> To: example.com RELAY
>
>
> So, I refuse mail from Internet claming to be from my domain. Of
> course I accept mail to my domain.
> Now the problem. I would want to accept mail coming from specific IP
> address with mail from: my domain.
>
> I tried to add like first line
>
> x.x.x.x RELAY
>
> where x.x.x.x is the specific IP that I want to let to send mail using
> my domain like mail from:
>
> This obviously doesn't work, so I'm asking you if some expert can help
> me providing the way to do this.

"Forgering"? The appropriate participle is forging.

Your solution is SPF.
spam [ Di, 08 April 2008 02:26 ] [ ID #1938458 ]

Re: forgering exception

quartex73 [at] gmail.com wrote:
> Hi,
> I have a MX only server and I have set up the following in /etc/mai/
> access:
>
> From: example.com error:554:No forgering please
> To: example.com RELAY
>
>
> So, I refuse mail from Internet claming to be from my domain. Of
> course I accept mail to my domain.

Ever heard of SPF? Might want to google that quickly before you keep this
thread going and waste our time.
Scott Grayban [ Di, 08 April 2008 17:07 ] [ ID #1938466 ]

Re: forgering exception [OT: access syntax]

quartex73 [at] gmail.com wrote:

> I have a MX only server and I have set up the following in /etc/mai/
> access:
>
> From: example.com error:554:No forgering please
> To: example.com RELAY

AFAIK There should no space after :

From:example.com error:554:No forgering please
To:example.com RELAY

> [...]

--
[pl>en: Andrew] Andrzej Adam Filip anfi [at] xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/
I'll see you... on the dark side of the moon...
-- Pink Floyd
Andrzej Filip [ Di, 08 April 2008 17:32 ] [ ID #1938467 ]

Re: forgering exception [OT: access syntax]

On Apr 8, 5:32 pm, Andrzej Adam Filip <a... [at] onet.eu> wrote:

> > From: example.com error:554:No forgering please
> > To: example.com RELAY
>
> AFAIK There should no space after :

Yes, that was set correct but reported here badly.

Finally I used a custom rule like the following:

SLocal_check_mail
R$* $: $1 $|
$&{client_addr}
R< $* [at] $* mydomain.example > $| x.x.x.x $ [at] <OK>
R< $* [at] $* mydomain.example > $| $* $#error $ [at] 5.5.4 $: "571 No
forging please"
R< $* [at] localhost $* > $| 127.0.0.1 $ [at] <OK>
R< $* [at] localhost $* > $| $* $#error $ [at] 5.5.4 $:
"553 Real domain name required for sender address"

And removed entry From: in the access.db
Quartex Quartex [ Di, 08 April 2008 18:38 ] [ ID #1938468 ]

Re: forgering exception

Post removed (X-No-Archive: yes)
Notifier Deamon [ Mi, 09 April 2008 00:32 ] [ ID #1938474 ]
Miscellaneous » comp.mail.sendmail » forgering exception

Vorheriges Thema: how to configure sendmail (sasl) to use two different SMTP_AUTH methods
Nächstes Thema: Re: Tricky config: Sendmail and mailertable for only one user