🚀 go-pugleaf

In article <1992Jul28.085513.23795@iti.gov.sg> jameslow@iti.gov.sg (James Low (RC)) writes:
>Hi, I would like to know if sendmail can be configured to stop certain
>users such that they can only send mails in the local domain, and not
>out into the Internet.  Very nasty thing to do indeed, but that was the
>requirement for connecton to Internet (some non-R&D folks do not get
>access!).

That's what we do here.  Actually, it's not exactly "configured" -- it's
compiled into the sendmail code.  I think it could be done from the .cf
file, but I inherited this setup, and I see evidence of failed tries, so
I'm afraid to touch it.

The way it works here is that the sender's username is checked to see that
it exists in the aliases file -- this occurs on the mail gateway machine.
If it doesn't, the mail gets returned with an explanatory message about
"you do not have access".  When a user wants access, he must sign a
disclaimer, and then we add his aliases to the aliases file.  Note that
this also controls incoming mail (sort-of).

If somebody has done this with .cf changes (and no code changes), I'l
like to see it.

Please no flames about fascist policies and the like.  CYA is the name of
the game, and *I* didn't make the policy anyway.
-- 
Todd Williams    UNIX Systems Coordinator     todd@macsch.com    (213) 259-4973
MacNeal-Schwendler Corp. ("MSC"),  815 Colorado Blvd.,  Los Angeles, CA   90041
"The Democrats stand for nothing except 'I wish I was a Republican' and the
Republicans stand for raw, unbridled evil and greed and ignorance smothered
in balloons and ribbons."  -Frank Zappa, 1991  (Zappa for president!)