RE: Blocking an individual email address

2006-02-17 Thread Ted Mittelstaedt
Jim,

  I would suggest you put an IP number block into your router
to deny outgoing SMTP destined to the mailserver she is using.

  But, frankly your really on legal thin ice here.  I'm guessing
her manager asked you to do this rather than confronting her
directly.  Probably because he's a bad manager who is scared of
confrontation.  The legal problem is that the second you do anything
you have just established that your company knew about the mail
diversion and chose not to confront her.

  I can tell you what happens in many of these cases.  The
employee gets around the block and continues to send mail home.
Eventually the lame-brained manager is forced to confront her
and tell her to knock it off or she will be fired.  She won't
stop doing it and she will get fired.  Then she will file a 
wrongful termination lawsuit against you, and in it she will
say that she was being singled out because the company knew she was
doing this for months and since they didn't confront her directly,
they approved what she was doing.  You guys will end up losing
and your going to pay her a lot of money.

  The best way to handle the problem is for the company to
have clear written guidelines that apply equally to all employees
that prohibit this.  You have your HR department release a set
of these to all employees.  Your lamebrained manager then shows
the employee the guidelines and says these are the new guidelines,
and henceforth if you violate them the penalties are spelled out.

  Without guidelines a court is going to say that since the
company didn't explicitly forbid it, and it wasn't illegal, that
the employee had a right to do it.

  Good luck!  I hope you end up figuring out how to block her
because nothing teaches better than doing it wrong and getting
burned.  This will be a good learning experience for you.  Just
remember that when these lawsuits blow up, that everyone involved
in a peripheral way within the company gets terminated, I
hope you don't get caught in it.

Ted


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of James Csoka
Sent: Wednesday, February 15, 2006 7:52 AM
To: freebsd-questions@freebsd.org
Subject: Blocking an individual email address


I am running a FreeBSD 5.4p10 machine at my office.  It 
functions as our firewall and mailserver.  I am running 
Mailscanner, which invokes sendmail when necessary to process 
mail.  Sendmail is not started by defaultMailscanner 
invokes individual instances of it when it needs to.

Here is my problem.  I have an employee at my office that is 
sending work email to her home email address.  I need to find a 
way to block her email address, whether To, From, Cc, Bcc, or 
whatever, from passing through my mailserver.  I have already 
added a line to /etc/mail/access  (in the format  
[EMAIL PROTECTED]  REJECT), and have run makemap hash 
/etc/mail/access.db  /etc/mail/access. I tested this with 
my personal email address (external to my network), and it had 
the effect of blocking any email orginating from my personal 
email to any address at my work, however it does not prevent me 
from sending emails to this address from a work address, which 
is the whole point.

Does anyone have any ideas?  I could tag the address as spam, 
but I would rather not.  There has to be a way to block anyone 
from sending to a certain email address, I would think.

Any help would be appreciated.

-Jim
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.375 / Virus Database: 267.15.10/262 - Release 
Date: 2/16/2006

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-16 Thread Ken Stevenson

Jim Csoka wrote:
No...I ran make maps, as well as make install for the blacklist feature, 
and make restart.


However, here is something interesting.  When I access my corporate 
email via openwebmail, it functions as I would expectyou cannot send 
or receive to the given address.  However, when using Outlook Express 
(internal mail client at work), you can still send mail to the address I 
am trying to block.


Why should this be so?

Are you sure Outlook Express is configured to use your FreeBSD server 
for SMTP? Send an email to yourself using Outlook Express then look at 
the message source and check the headers to verify which SMTP server 
is sending the message.


--
Ken Stevenson
Allen-Myland Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-16 Thread James Csoka

- Original Message - 
From: Ken Stevenson [EMAIL PROTECTED]
To: Jim Csoka [EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Thursday, February 16, 2006 10:31 AM
Subject: Re: Blocking an individual email address


 Jim Csoka wrote:
  No...I ran make maps, as well as make install for the blacklist feature,
  and make restart.
 
  However, here is something interesting.  When I access my corporate
  email via openwebmail, it functions as I would expectyou cannot send
  or receive to the given address.  However, when using Outlook Express
  (internal mail client at work), you can still send mail to the address I
  am trying to block.
 
  Why should this be so?
 
 Are you sure Outlook Express is configured to use your FreeBSD server
 for SMTP? Send an email to yourself using Outlook Express then look at
 the message source and check the headers to verify which SMTP server
 is sending the message.

 -- 
 Ken Stevenson
 Allen-Myland Inc.


Yes, I'm sure.  It is the incoming and outgoing SMTP server.  It's the only
one we have.

-Jim

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Blocking an individual email address

2006-02-16 Thread bob

 Jim Csoka wrote:
  No...I ran make maps, as well as make install for the blacklist
feature,
  and make restart.
 
  However, here is something interesting.  When I access my
corporate
  email via openwebmail, it functions as I would expectyou
cannot send
  or receive to the given address.  However, when using Outlook
Express
  (internal mail client at work), you can still send mail to the
address I
  am trying to block.
 
  Why should this be so?
 
 Are you sure Outlook Express is configured to use your FreeBSD
server
 for SMTP? Send an email to yourself using Outlook Express then
look at
 the message source and check the headers to verify which SMTP
server
 is sending the message.

 --
 Ken Stevenson
 Allen-Myland Inc.


Yes, I'm sure.  It is the incoming and outgoing SMTP server.  It's
the only
one we have.

-Jim

___

Yes that may be the only one you have, but that does not stop the
user from configuring their outlook express from using their
personal email account at their ISP. To stop this you can add
firewall rules to deny all LAN traffic out to ports 25  110 by
coding the private LAN ip address range in the rule from option.
Since your SMTP service is on the gateway box where the firewall is
your outbound port 25 will pass because your using the public ip
address or if that is not the case then just add a rule before the
deny rule to pass your SMTP LAN ip address.




o unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-16 Thread James Csoka

- Original Message - 
From: [EMAIL PROTECTED]
To: James Csoka [EMAIL PROTECTED]; Ken Stevenson
[EMAIL PROTECTED]
Cc: freebsd-questions@freebsd.org
Sent: Thursday, February 16, 2006 10:55 AM
Subject: RE: Blocking an individual email address



  Jim Csoka wrote:
   No...I ran make maps, as well as make install for the blacklist
 feature,
   and make restart.
  
   However, here is something interesting.  When I access my
 corporate
   email via openwebmail, it functions as I would expectyou
 cannot send
   or receive to the given address.  However, when using Outlook
 Express
   (internal mail client at work), you can still send mail to the
 address I
   am trying to block.
  
   Why should this be so?
  
  Are you sure Outlook Express is configured to use your FreeBSD
 server
  for SMTP? Send an email to yourself using Outlook Express then
 look at
  the message source and check the headers to verify which SMTP
 server
  is sending the message.
 
  --
  Ken Stevenson
  Allen-Myland Inc.
 

 Yes, I'm sure.  It is the incoming and outgoing SMTP server.  It's
 the only
 one we have.

 -Jim

 ___

 Yes that may be the only one you have, but that does not stop the
 user from configuring their outlook express from using their
 personal email account at their ISP. To stop this you can add
 firewall rules to deny all LAN traffic out to ports 25  110 by
 coding the private LAN ip address range in the rule from option.
 Since your SMTP service is on the gateway box where the firewall is
 your outbound port 25 will pass because your using the public ip
 address or if that is not the case then just add a rule before the
 deny rule to pass your SMTP LAN ip address.






Understood.  However, most everyone here in my office (a mortgage company of
about 25 people) can barely even spell the word computer much less use one
effectively.  And, aside from that, I am running these tests from my windows
client, so I can verify that it is configured correctly for the purpose of
running these tests.  Although I wish it were as simple as someone using a
different SMTP serverit would make my life easier :P


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Blocking an individual email address

2006-02-16 Thread bob



  Jim Csoka wrote:
   No...I ran make maps, as well as make install for the
blacklist
 feature,
   and make restart.
  
   However, here is something interesting.  When I access my
 corporate
   email via openwebmail, it functions as I would expectyou
 cannot send
   or receive to the given address.  However, when using Outlook
 Express
   (internal mail client at work), you can still send mail to the
 address I
   am trying to block.
  
   Why should this be so?
  
  Are you sure Outlook Express is configured to use your FreeBSD
 server
  for SMTP? Send an email to yourself using Outlook Express then
 look at
  the message source and check the headers to verify which SMTP
 server
  is sending the message.
 
  --
  Ken Stevenson
  Allen-Myland Inc.
 

 Yes, I'm sure.  It is the incoming and outgoing SMTP server.  It's
 the only
 one we have.

 -Jim

 ___

 Yes that may be the only one you have, but that does not stop the
 user from configuring their outlook express from using their
 personal email account at their ISP. To stop this you can add
 firewall rules to deny all LAN traffic out to ports 25  110 by
 coding the private LAN ip address range in the rule from option.
 Since your SMTP service is on the gateway box where the firewall
is
 your outbound port 25 will pass because your using the public ip
 address or if that is not the case then just add a rule before the
 deny rule to pass your SMTP LAN ip address.






Understood.  However, most everyone here in my office (a mortgage
company of
about 25 people) can barely even spell the word computer much less
use one
effectively.  And, aside from that, I am running these tests from my
windows
client, so I can verify that it is configured correctly for the
purpose of
running these tests.  Although I wish it were as simple as someone
using a
different SMTP serverit would make my life easier :P

**

Have you physically used this offending persons work PC during off
hours
and investigated just how they have their outlook explorer
configured???




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-16 Thread Andrew L. Gould
On Thu, 16 Feb 2006 11:27:40 -0500
[EMAIL PROTECTED] wrote:
 
 
   Jim Csoka wrote:
No...I ran make maps, as well as make install for the
 blacklist
  feature,
and make restart.
   
However, here is something interesting.  When I access my
  corporate
email via openwebmail, it functions as I would expectyou
  cannot send
or receive to the given address.  However, when using Outlook
  Express
(internal mail client at work), you can still send mail to the
  address I
am trying to block.
   
Why should this be so?
   
   Are you sure Outlook Express is configured to use your FreeBSD
  server
   for SMTP? Send an email to yourself using Outlook Express then
  look at
   the message source and check the headers to verify which SMTP
  server
   is sending the message.
  
   --
   Ken Stevenson
   Allen-Myland Inc.
  
 
  Yes, I'm sure.  It is the incoming and outgoing SMTP server.  It's
  the only
  one we have.
 
  -Jim
 
  ___
 
  Yes that may be the only one you have, but that does not stop the
  user from configuring their outlook express from using their
  personal email account at their ISP. To stop this you can add
  firewall rules to deny all LAN traffic out to ports 25  110 by
  coding the private LAN ip address range in the rule from option.
  Since your SMTP service is on the gateway box where the firewall
 is
  your outbound port 25 will pass because your using the public ip
  address or if that is not the case then just add a rule before the
  deny rule to pass your SMTP LAN ip address.
 
 
 
 Understood.  However, most everyone here in my office (a mortgage
 company of
 about 25 people) can barely even spell the word computer much less
 use one
 effectively.  And, aside from that, I am running these tests from my
 windows
 client, so I can verify that it is configured correctly for the
 purpose of
 running these tests.  Although I wish it were as simple as someone
 using a
 different SMTP serverit would make my life easier :P
 
 **
 
 Have you physically used this offending persons work PC during off
 hours
 and investigated just how they have their outlook explorer
 configured???

At what point does this stop being an IS issue and start being a Human
Resources issue?  (I realize that a company of 25 people probably does
not have a Human Resources Department.)

A mortgage company handles a lot of private information.
The employees need to be trustworthy; and the information needs to be
protected.  However, the responsibility for protecting company
information does not fall solely upon IS.  If an employee is sending
sensitive information home against company policy, the policy needs to
be enforced.  The employee should be counseled/educated/corrected and,
if necessary, fired.

Whereas I think there should be strong IS policies in place, and I
applaud the original poster's diligence, a defacto policy of
playing cat-and-mouse can be horribly inefficient.

Andrew Gould
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address....again

2006-02-16 Thread Derek Ragona
To debug this you need to kick up the logging on sendmail, add the loglevel 
option to your sendmail options in rc.conf:

-O LogLevel=80

You will need a loglevel value fairly high, like 80.  You can then watch or 
just look at the sendmail log file:

/var/log/maillog

And see what is actually happening.

You should be aware that there are typically 2 to 3 separate instances of 
sendmail running passing the mail around.


Hope this helps.

-Derek


At 09:39 AM 2/16/2006, James Csoka wrote:

I'm reposting this with some more info.any help would be greatly
appreciated.

I have a mail server (it also functions as a firewall) running freebsd5.4,
with mailscanner, openwebmail, and sendmail.  I wish to block an individual
email address, but I do not want to mark it as spam.  My first solution was
to add the blacklist feature to the sendmail.mc file, and recreate the .cf
file, which I did.  I then added the line To:[EMAIL PROTECTED]  REJECT to the
/etc/mail/access file, and ran make maps.  I also had added the line
[EMAIL PROTECTED]  REJECT.

This then blocked that address from sending email to people on my internal
network.  When I tested it from outside my network I used openwebmail as a
web interface to send email to that address, and it failed.  Which was what
I wanted.  However, from inside my network, using Outlook, you can send
email to that address without a problem.

It seems as if the access.db is doing it's job.  When using openwebmail, the
smtp server rejects any attempt to send mail to that address.  however,
locally, it does not.  When i'm sitting in front of my windows client, I can
use Outlook and send email to that address without a problem.

Does anyone know why via a web interface, the access file rules would apply,
yet they would be ignored when sending mail from inside the network using
Outlook to send external email?



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread James Csoka
Okay...I think I answered part of my question.  /etc/mail/access only
governs mail relaying.  Which would mean that of course, it wouldn't accept
mail from that address, but would have no problem sending mail to it.

Soany ideas on how I can simply block 1 particular email address,
without marking it as spam?


- Original Message - 
From: James Csoka [EMAIL PROTECTED]
To: freebsd-questions@freebsd.org
Sent: Wednesday, February 15, 2006 10:52 AM
Subject: Blocking an individual email address


 I am running a FreeBSD 5.4p10 machine at my office.  It functions as our
firewall and mailserver.  I am running Mailscanner, which invokes sendmail
when necessary to process mail.  Sendmail is not started by
defaultMailscanner invokes individual instances of it when it needs to.

 Here is my problem.  I have an employee at my office that is sending work
email to her home email address.  I need to find a way to block her email
address, whether To, From, Cc, Bcc, or whatever, from passing through my
mailserver.  I have already added a line to /etc/mail/access  (in the format
[EMAIL PROTECTED]  REJECT), and have run makemap hash
/etc/mail/access.db  /etc/mail/access. I tested this with my personal
email address (external to my network), and it had the effect of blocking
any email orginating from my personal email to any address at my work,
however it does not prevent me from sending emails to this address from a
work address, which is the whole point.

 Does anyone have any ideas?  I could tag the address as spam, but I would
rather not.  There has to be a way to block anyone from sending to a certain
email address, I would think.

 Any help would be appreciated.

 -Jim
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Ken Stevenson

James Csoka wrote:

I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
firewall and mailserver.  I am running Mailscanner, which invokes sendmail when 
necessary to process mail.  Sendmail is not started by defaultMailscanner 
invokes individual instances of it when it needs to.

Here is my problem.  I have an employee at my office that is sending work email to 
her home email address.  I need to find a way to block her email address, whether 
To, From, Cc, Bcc, or whatever, from passing through my mailserver.  I have 
already added a line to /etc/mail/access  (in the format  [EMAIL PROTECTED]  
REJECT), and have run makemap hash /etc/mail/access.db  /etc/mail/access. 
I tested this with my personal email address (external to my network), and it had 
the effect of blocking any email orginating from my personal email to any address 
at my work, however it does not prevent me from sending emails to this address 
from a work address, which is the whole point.

Does anyone have any ideas?  I could tag the address as spam, but I would 
rather not.  There has to be a way to block anyone from sending to a certain 
email address, I would think.

Any help would be appreciated.

-Jim


I don't mean to be a wise ass but this sounds wrong on so many levels. 
Why can't she send email to her home email address? If there's a good 
reason, can't you firmly explain the company policy to her, tell her 
all mail is logged and that she'll be fired if she continues to 
violate company policy?


Bottom line, if she doesn't care about following company policy, 
she'll get around any countermeasures you try to employ, one way or 
the other.


--
Ken Stevenson
Allen-Myland Inc.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Dan Nelson
In the last episode (Feb 15), James Csoka said:
 Okay...I think I answered part of my question.  /etc/mail/access only
 governs mail relaying.  Which would mean that of course, it wouldn't accept
 mail from that address, but would have no problem sending mail to it.

It covers local and outgoing delivery as well.  If you add

To:[EMAIL PROTECTED]REJECT

then no-one will be able to send mail to that user from your site.  See
http://www.sendmail.org/m4/anti_spam.html#access_db_fine .

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Robert Slade
On Wed, 2006-02-15 at 15:52, James Csoka wrote:
 I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
 firewall and mailserver.  I am running Mailscanner, which invokes sendmail 
 when necessary to process mail.  Sendmail is not started by 
 defaultMailscanner invokes individual instances of it when it needs to.
 
 Here is my problem.  I have an employee at my office that is sending work 
 email to her home email address.  I need to find a way to block her email 
 address, whether To, From, Cc, Bcc, or whatever, from passing through my 
 mailserver.  I have already added a line to /etc/mail/access  (in the format  
 [EMAIL PROTECTED]  REJECT), and have run makemap hash /etc/mail/access.db 
  /etc/mail/access. I tested this with my personal email address 
 (external to my network), and it had the effect of blocking any email 
 orginating from my personal email to any address at my work, however it does 
 not prevent me from sending emails to this address from a work address, which 
 is the whole point.
 
 Does anyone have any ideas?  I could tag the address as spam, but I would 
 rather not.  There has to be a way to block anyone from sending to a certain 
 email address, I would think.
 
 Any help would be appreciated.
 
 -Jim

Jim,

Just a thought have you tired adding the address to /etc/aliases and
sending the mail to a different address or a back hole?

Rob
  

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Philip Hallstrom
I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
firewall and mailserver.  I am running Mailscanner, which invokes 
sendmail when necessary to process mail.  Sendmail is not started by 
defaultMailscanner invokes individual instances of it when it needs 
to.


Here is my problem.  I have an employee at my office that is sending 
work email to her home email address.  I need to find a way to block her 
email address, whether To, From, Cc, Bcc, or whatever, from passing 
through my mailserver.  I have already added a line to /etc/mail/access 
(in the format [EMAIL PROTECTED] REJECT), and have run makemap hash 
/etc/mail/access.db  /etc/mail/access.  I tested this with my personal 
email address (external to my network), and it had the effect of 
blocking any email orginating from my personal email to any address at 
my work, however it does not prevent me from sending emails to this 
address from a work address, which is the whole point.


I doubt we know the whole story, but even if you do find a way to make 
this work what stops her from...


- emailing her work to her gmail/hotmail/yahoo account?
- copying her email and putting it on a thumb drive?
- printing it out and taking it home?

If you are trying to stop her from taking work material home then you've 
got a much bigger problem.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Michel Di Croci
2006/2/15, Philip Hallstrom [EMAIL PROTECTED]:

  I am running a FreeBSD 5.4p10 machine at my office.  It functions as our
  firewall and mailserver.  I am running Mailscanner, which invokes
  sendmail when necessary to process mail.  Sendmail is not started by
  defaultMailscanner invokes individual instances of it when it needs
  to.
 
  Here is my problem.  I have an employee at my office that is sending
  work email to her home email address.  I need to find a way to block her

  email address, whether To, From, Cc, Bcc, or whatever, from passing
  through my mailserver.  I have already added a line to /etc/mail/access
  (in the format [EMAIL PROTECTED] REJECT), and have run makemap hash
  /etc/mail/access.db  /etc/mail/access.  I tested this with my personal
  email address (external to my network), and it had the effect of
  blocking any email orginating from my personal email to any address at
  my work, however it does not prevent me from sending emails to this
  address from a work address, which is the whole point.

 I doubt we know the whole story, but even if you do find a way to make
 this work what stops her from...

 - emailing her work to her gmail/hotmail/yahoo account?
 - copying her email and putting it on a thumb drive?
 - printing it out and taking it home?

 If you are trying to stop her from taking work material home then you've

 got a much bigger problem.



There's also the issue that she can use a webmail to send mail to her house
account and joining document there
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Blocking an individual email address

2006-02-15 Thread James Csoka
After reading the page you linked to, and looking at the examples, I added
the line To:[EMAIL PROTECTED] REJECT (using my personal email), and it had no
effect.  I can't find any good reason it didn't work, but it fails to
prevent me from sending mail from inside my work network to my home address.

any ideas?


- Original Message - 
From: Dan Nelson [EMAIL PROTECTED]
To: James Csoka [EMAIL PROTECTED]
Cc: Freebsd - Questions freebsd-questions@freebsd.org
Sent: Wednesday, February 15, 2006 11:12 AM
Subject: Re: Blocking an individual email address


 In the last episode (Feb 15), James Csoka said:
  Okay...I think I answered part of my question.  /etc/mail/access only
  governs mail relaying.  Which would mean that of course, it wouldn't
accept
  mail from that address, but would have no problem sending mail to it.

 It covers local and outgoing delivery as well.  If you add

 To:[EMAIL PROTECTED] REJECT

 then no-one will be able to send mail to that user from your site.  See
 http://www.sendmail.org/m4/anti_spam.html#access_db_fine .

 -- 
 Dan Nelson
 [EMAIL PROTECTED]
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
[EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Dan Nelson
In the last episode (Feb 15), James Csoka said:
 After reading the page you linked to, and looking at the examples, I
 added the line To:[EMAIL PROTECTED] REJECT (using my personal email),
 and it had no effect.  I can't find any good reason it didn't work,
 but it fails to prevent me from sending mail from inside my work
 network to my home address.

I thought To: checks would work on outgoing mail, but it looks like
that's not the case.  From
http://www.sendmail.org/m4/features.html#blacklist_recipients :

blacklist_recipients

  Turns on the ability to block incoming mail for certain recipient
  usernames, hostnames, or addresses. For example, you can block
  incoming mail to user nobody, host foo.mydomain.com, or
  [EMAIL PROTECTED] These specifications are put in the access db
  as described in the Anti-Spam Configuration Control section later in
  this document.
 
 any ideas?

Try posting your question to the comp.mail.sendmail newsgroup; search
the archives at http://groups.google.com/group/comp.mail.sendmail
first, though.  Someone must have wanted to do what you're trying
before.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Lowell Gilbert
James Csoka [EMAIL PROTECTED] writes:

 After reading the page you linked to, and looking at the examples, I added
 the line To:[EMAIL PROTECTED] REJECT (using my personal email), and it had no
 effect.  I can't find any good reason it didn't work, but it fails to
 prevent me from sending mail from inside my work network to my home address.

Maybe putting an alias on the home address?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Nathan Vidican

Lowell Gilbert wrote:

James Csoka [EMAIL PROTECTED] writes:



After reading the page you linked to, and looking at the examples, I added
the line To:[EMAIL PROTECTED] REJECT (using my personal email), and it had no
effect.  I can't find any good reason it didn't work, but it fails to
prevent me from sending mail from inside my work network to my home address.



Maybe putting an alias on the home address?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



cd /etc/mail
vi access
make maps

You probably forgot to 'make maps'.

--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread James Long
 Date: Wed, 15 Feb 2006 10:52:26 -0500
 From: James Csoka [EMAIL PROTECTED]
 Subject: Blocking an individual email address
 To: freebsd-questions@freebsd.org
 Message-ID: [EMAIL PROTECTED]
 Content-Type: text/plain; charset=iso-8859-1
 
 I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
 firewall and mailserver.  I am running Mailscanner, which invokes sendmail 
 when necessary to process mail.  Sendmail is not started by 
 defaultMailscanner invokes individual instances of it when it needs to.
 
 Here is my problem.  I have an employee at my office that is sending work 
 email to her home email address.  I need to find a way to block her email 
 address, whether To, From, Cc, Bcc, or whatever, from passing through my 
 mailserver.  I have already added a line to /etc/mail/access  (in the format  
 [EMAIL PROTECTED]  REJECT), and have run makemap hash /etc/mail/access.db 
  /etc/mail/access. I tested this with my personal email address 
 (external to my network), and it had the effect of blocking any email 
 orginating from my personal email to any address at my work, however it does 
 not prevent me from sending emails to this address from a work address, which 
 is the whole point.
 
 Does anyone have any ideas?  I could tag the address as spam, but I would 
 rather not.  There has to be a way to block anyone from sending to a certain 
 email address, I would think.
 
 Any help would be appreciated.
 
 -Jim

I am not a sendmail expert, but try adding this line to your sendmail.mc:

FEATURE(blacklist_recipients)

My understanding is that this causes blacklisted email addresses to be
applied to both sender (which you verified, sending from your home personal
address) and recipients (which you're trying to accomplish, blocking the
employee's address when designated as a To:/Cc:/Bcc: recipient).

Add that line, remembering to re-create your sendmail.cf, restart sendmail,
and try again.

Jim
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Gerard Seibert
James Long wrote:

  Date: Wed, 15 Feb 2006 10:52:26 -0500
  From: James Csoka [EMAIL PROTECTED]
  Subject: Blocking an individual email address
  To: freebsd-questions@freebsd.org
  Message-ID: [EMAIL PROTECTED]
  Content-Type: text/plain;   charset=iso-8859-1
  
  I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
  firewall and mailserver.  I am running Mailscanner, which invokes sendmail 
  when necessary to process mail.  Sendmail is not started by 
  defaultMailscanner invokes individual instances of it when it needs to.
  
  Here is my problem.  I have an employee at my office that is sending work 
  email to her home email address.  I need to find a way to block her email 
  address, whether To, From, Cc, Bcc, or whatever, from passing through my 
  mailserver.  I have already added a line to /etc/mail/access  (in the 
  format  [EMAIL PROTECTED]  REJECT), and have run makemap hash 
  /etc/mail/access.db  /etc/mail/access. I tested this with my personal 
  email address (external to my network), and it had the effect of blocking 
  any email orginating from my personal email to any address at my work, 
  however it does not prevent me from sending emails to this address from a 
  work address, which is the whole point.
  
  Does anyone have any ideas?  I could tag the address as spam, but I would 
  rather not.  There has to be a way to block anyone from sending to a 
  certain email address, I would think.
  
  Any help would be appreciated.
  
  -Jim
 
 I am not a sendmail expert, but try adding this line to your sendmail.mc:
 
 FEATURE(blacklist_recipients)
 
 My understanding is that this causes blacklisted email addresses to be
 applied to both sender (which you verified, sending from your home personal
 address) and recipients (which you're trying to accomplish, blocking the
 employee's address when designated as a To:/Cc:/Bcc: recipient).
 
 Add that line, remembering to re-create your sendmail.cf, restart sendmail,
 and try again.
 
 Jim

Well, if you want a positive solution, you could just dismiss her. It
would seem that you have good cause. Simply document that you have
instructed her to cease abusing the email system. Then when she does
violate your orders, terminate her.

-- 
Gerard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Derek Ragona

If you installed MailScanner from the ports, look to change:
/usr/local/etc/MailScanner/rules/spam.blacklist.rules

You can specify To, and From rules, there, maybe more.  I am no expert.

Hope this helps,

-Derek

At 09:52 AM 2/15/2006, James Csoka wrote:
I am running a FreeBSD 5.4p10 machine at my office.  It functions as our 
firewall and mailserver.  I am running Mailscanner, which invokes sendmail 
when necessary to process mail.  Sendmail is not started by 
defaultMailscanner invokes individual instances of it when it needs to.


Here is my problem.  I have an employee at my office that is sending work 
email to her home email address.  I need to find a way to block her email 
address, whether To, From, Cc, Bcc, or whatever, from passing through my 
mailserver.  I have already added a line to /etc/mail/access  (in the 
format  [EMAIL PROTECTED]  REJECT), and have run makemap hash 
/etc/mail/access.db  /etc/mail/access. I tested this with my personal 
email address (external to my network), and it had the effect of blocking 
any email orginating from my personal email to any address at my work, 
however it does not prevent me from sending emails to this address from a 
work address, which is the whole point.


Does anyone have any ideas?  I could tag the address as spam, but I would 
rather not.  There has to be a way to block anyone from sending to a 
certain email address, I would think.


Any help would be appreciated.

-Jim
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Chuck Swiger
James Csoka wrote:
 After reading the page you linked to, and looking at the examples, I added
 the line To:[EMAIL PROTECTED] REJECT (using my personal email), and it had no
 effect.  I can't find any good reason it didn't work, but it fails to
 prevent me from sending mail from inside my work network to my home address.

Do you do a make access.db or make all afterwards to rebuild the database?

Maybe try restarting sendmail (make restart) and see whether /var/log/maillog
says something interesting about that file or something else that might be 
helpful?

(Does a logfile that no-one reads make any noise?  :-)

-- 
-Chuck
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Blocking an individual email address

2006-02-15 Thread Jim Csoka
No...I ran make maps, as well as make install for the blacklist feature, and 
make restart.


However, here is something interesting.  When I access my corporate email 
via openwebmail, it functions as I would expectyou cannot send or 
receive to the given address.  However, when using Outlook Express (internal 
mail client at work), you can still send mail to the address I am trying to 
block.


Why should this be so?


- Original Message - 
From: Nathan Vidican [EMAIL PROTECTED]

To: freebsd-questions@freebsd.org
Cc: [EMAIL PROTECTED]
Sent: Wednesday, February 15, 2006 5:00 PM
Subject: Re: Blocking an individual email address



Lowell Gilbert wrote:

James Csoka [EMAIL PROTECTED] writes:


After reading the page you linked to, and looking at the examples, I 
added
the line To:[EMAIL PROTECTED] REJECT (using my personal email), and it had 
no

effect.  I can't find any good reason it didn't work, but it fails to
prevent me from sending mail from inside my work network to my home 
address.



Maybe putting an alias on the home address?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




cd /etc/mail
vi access
make maps

You probably forgot to 'make maps'.

--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]