> Thanks for the suggestions. I know that I just must not have explained my
> situation clearly. Apologies for that... Here is my situation: The people
> who I want to allow access to my mail server are not in my domain. They do
> have shell accounts in my domain, but they do not dial in. My one friend
> has an MSN account that he uses for Internet access. He doesn't have a
> static IP address from MSN, so I can't enter a static IP into the
> /etc/mail/access file as I have done for my laptop (which is in my domain).
> I am not comfortable with the idea of a script automatically entering each
> new IP that MSN assigns him though. I have worked with Netscape's Messaging
> server before. From my experience with that product, I know that I can
> authenticate valid users against the local user list without the need for
> the sender's IP to be within the domain. Is it possible to get sendmail to
> do that? I have created local shell accounts for my friends on my box, but
> they are still denied the ability to send mail through my SMTP. Basically,
> I want to be able to provide complete POP3 and SMTP mail services to my
> friends without screwing up security. I know I could allow anyone from the
> aol.com or msn.com domains to relay, but that is what I want to avoid. I
> only want users with a mail username and password to be able to use my POP3
> and SMTP services. Does this make sense?
>
sendmail won't do it.
There is a POP3 extension that allows users to send mail. I do not know
which server or client software implements it; I remember it came up in
another circle (OS/2) two or three years ago.
If you can be crude about it, you could possible transfer mail to your
host by ftp - that will authenticate. Anything that appears in a
particular directory (or subdirectory of their home) is outgoing mail.
Another idea; when I go online, I ftp my IP address to another box; that
box has used it to send stuff to mine by ftp. You could use the same idea,
or get them to mail to a script on your machine; your can find where the
user is from the headers.
Depending on firewalls, you could validate them by checking for some
particular response from some particular port, and maybe provide them with
a program that will provide that response.
--
Cheers
John Summerfield
http://os2.ami.com.au/os2/ for OS/2 support.
Configuration, networking, combined IBM ftpsites index.
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
