On Thu, Jan 31, 2002 at 11:33:49PM -0700, Paul Andrews wrote:
> I have tested to see if the everything worked and it did, however when  I
> run the delete script to remove the user's IP records after 15 minutes, my
> computers on the inside can no longer connect to the smtp without first
> connecting via POP3.

> pop3-record
> #!/bin/sh
> echo "$TCPREMOTEIP:allow,RELAYCLIENT=\"\",TCPREMOTEINFO=\"$AUTHUSER\"">>
> /service/qmail-smtpd/tcp.filter.newer

is this all one line? if not -> fix that.

> cat /service/qmail-smtpd/tcp.filter.* /service/qmail-smtpd/tcp | tcprules
> /service/qmail-smtpd/tcp.cdb /service/qmail-smtpd/tcp.cdb.$$

is this all one line? if not -> fix that.
does /service/qmail-smtpd/tcp exist? 
is your tcpserver invocation pointed to /service/qmail-smtpd/tcp.cdb

> pop3-delete
> #!/bin/sh
> mv /service/qmail-smtpd/tcp.filter.newer
> /service/qmail-smtpd/tcp.filter.older

is this all one line? if not -> fix that.

> cat /service/qmail-smtpd/tcp.filter.* /service/qmail-smtpd/tcp | tcprules
> /service/qmail-smtpd/tcp.cdb /service/qmail-smtpd/tcp.cdb.$$

is this all one line? if not -> fix that.
again, check for the files.

> Any suggestions would be great... I would like to have it so that the
> internal clients can always connect whether they autheticate via POP3 or
> IMAP, and only allow the external clients access when the authenticate with
> a 15 min window of opportunity after which their access is removed until
> they authenticate again.

You need to give relay access for internal clients within
/service/qmail-smtpd/tcp.
External ones will be allowed to replay for the period of t .. 2*t, where t
is the time between two pop3-delete runs.

-- 
* Henning Brauer, [EMAIL PROTECTED], http://www.bsws.de    *
* BS Web Services, Roedingsmarkt 14, 20459 Hamburg, Germany *
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

Reply via email to