I have currently patched qmail+ldap with smtp-after-imap and smtp-after-pop,
and have created the necessary external scripts to update the tcprules
database.

I have tested to see if the everything worked and it did, however when  I
run the delete script to remove the user's IP records after 15 minutes, my
computers on the inside can no longer connect to the smtp without first
connecting via POP3. Secondly the user that last connected seems to have an
infinite record until another external user connects.

Here is my tcprules file for qmail-smtp and then the pop3-record and
pop3-delete scripts

tcp
127.0.0.1:allow,RELAYCLIENT=""
192.168.0.:allow,RELAYCLIENT=""

pop3-record
#!/bin/sh
echo "$TCPREMOTEIP:allow,RELAYCLIENT=\"\",TCPREMOTEINFO=\"$AUTHUSER\"">>
/service/qmail-smtpd/tcp.filter.newer
cat /service/qmail-smtpd/tcp.filter.* /service/qmail-smtpd/tcp | tcprules
/service/qmail-smtpd/tcp.cdb /service/qmail-smtpd/tcp.cdb.$$

pop3-delete
#!/bin/sh
mv /service/qmail-smtpd/tcp.filter.newer
/service/qmail-smtpd/tcp.filter.older
cat /service/qmail-smtpd/tcp.filter.* /service/qmail-smtpd/tcp | tcprules
/service/qmail-smtpd/tcp.cdb /service/qmail-smtpd/tcp.cdb.$$

Any suggestions would be great... I would like to have it so that the
internal clients can always connect whether they autheticate via POP3 or
IMAP, and only allow the external clients access when the authenticate with
a 15 min window of opportunity after which their access is removed until
they authenticate again.

Any help would be much appreciated...

---
Paul Andrews
E-mail: [EMAIL PROTECTED]


Reply via email to