Auth and noauth sendmail

[Brian Fahrlander]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Smoot Carl-Mitchell wrote:
> On Wed, 2007-08-22 at 20:37 -0300, Sergio Belkin wrote:
>> Hi community
>> I have an authenticated sendmail. I want to modifiy it in order to:
>> *All mail sent to mydomain.com is not authenticated
>> *All mail sent to any domain different as  mydomain.com be authenticated
>> (TLS included).
>>
>> How can I do that?  (I don't refer to complete procedure, but how can I do 
>> to "separate" mail by its destination) I was looking at access and 
>> mailtertable 
>> but it
>> seems that those files don't help me.
> 
> You set it up in the access file (/etc/mail/access).  Something like:
> 
> CERTISSUER:/C=US/ST=AZ/L=Scottsdale/O=TIC/CN=TIC/emailAddress=tic at tic.com RELAY
> 
> This says a client cert signed by the issuer can relay mail. Most email
> clients support this sort of authentication. As you can see, I created a
> private signing certificate and then signed client certs for the users I
> wish to allow relaying to my mail server. There are a number of HOWTOs
> out on the net explaining the nitty-gritty details. Your sendmail server
> must support SMTP-AUTH to get this to work.

    Dude. PLEASE put stuff like this in the Wiki, willya?  This is the
kinda thing I'd do once a year or less, and forget how later...but it's
terrific!

- --
 ------------------------------------------------------------------------
 Brian Fahrländer                 Christian, Conservative, and Technomad
 Evansville, IN                              http://Fahrlander.net/brian
 ICQ: 5119262                         AOL/Yahoo/GoogleTalk: WheelDweller
 ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGzReA6PLtRzZbdhYRAk7OAJ0Q2mJnw0PD3J4bRkSiqDMMiqzIAACdFqO2
Pu0sYdHUmgXOT0fbukUBPDU=
=pNH9
-----END PGP SIGNATURE-----