On Wed, 16 Oct 2013 15:41:04 -0400
"Kevin A. McGrail" <kmcgr...@pccc.com> wrote:

> So in the beginning for our issue, our firm implemented something 
> similar and it's documented at http://www.pccc.com/downloads/ldap/ 
> thanks primarily to Brian Landers <br...@packetslave.com>  and his 
> work.  This is a nice solution that uses LDAP and queries it to build
> an access list with sendmail.

We use MIMEDefang and we make real-time LDAP calls in filter_recipient.
So when a modification to Active Directory is made, it's instant... no
need to wait for the data to be updated on the Sendmail server.

The downside is that you can get a *lot* of LDAP traffic if there's
a dictionary attack.

Regards,

David.

Reply via email to