Great Circle Associates Firewalls
(May 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Configuring sendmail for firewall
From: James Tanis <jtt @ cs . columbia . edu>
Date: Fri, 06 May 1994 11:26:16 -0400
To: firewalls @ greatcircle . com
Followup-to: comp.mail.sendmail
In-reply-to: Your message of "Fri, 06 May 1994 12:17:20 BST." <199405061117 . AA03925 @ gd10 . rover . com>
Reply-to: jtt @ cs . columbia . edu

In message <199405061117 .
 AA03925 @
 gd10 .
 rover .
 com>, Lyndon David avows:
%--- Begin Cite ---%
> Jeff LaCoursiere asks:
> 
> If it helps, I can send the relevent part of the sendmail.cf, aw what th
> e 
> hell, here it is, our rulesets for our internal mail hub. the macro
> $H is defined as the name of the firewall forwarding mail to the outside
> .
> 
> 
> S0 # Punt to hub with names changed looking like came from hub
> #    if the mail is not local
> 
> 
> R$+ @
 rover .
 com		$@ $#local$:$1	
> 
> R$*			$#ether $ @
 $R $:$1
> 
> S3 # local users made to look like they are from the hub
> R$*<$*<$*>$*>$*	$3		denest
> R$*<$+>$*	$2		basic RFC822 parsing
> R$*<>$*		$n		RFC1123 <>
> R$-		$@ $1 @ $j	user => user @
 thishost

Just a word of warning about modifying ruleset 3. Though I'm certain that
this works for Mr. David, changing ruleset 3 is slightly dangerous and
should be carefully considered.  Any change there will be reflected in to
*all* addresses which can cause very peculiar errors which may take the
non-guru some time to debug.  Sendmail comes with a rich set of
post-cannonicallization rulesets. As much as possible, rewriting should be
taken care of there.

And since I have just taken this thread *completely* out of the firewalls
arena, I'd ask that any further questions get posted as a new thread
in another group (comp.mail.sendmail seems reasonable).

> 
%--- End Cite ---%	

Cheers,
/jtt


References:
Indexed By Date Previous: Password Aging
From: ken @ cameron . East . Sun . COM (Ken Harford - Network Architecture Consultant)
Next: Re: Resolving IP Addresses
From: yerkes_chuck @ jpmorgan . com
Indexed By Thread Previous: Configuring sendmail for firewall
From: Lyndon David <lyndond @ roverpte . demon . co . uk>
Next: help
From: larryl @ hpubvwa . nsr . hp . com

Google
 
Search Internet Search www.greatcircle.com