Hello,
i'm running sendmail on a machine with multiple ip-addresses.

Is it possible to map a local-host-name to a specific ip-address? if
the mail is delivered to a different ip-address "relaying denied"
should be returned if the user is not authenticated.

Example:
IP-Adresses: IP-1, IP-2
local-host-names: domain-1, domain-2

Sendmail should only accept mails for domain-1 on IP-1 and for
domain-2 on IP-2 when the sending client is not authenticed.

Connection on IP-1:
TO xy@domain-1 -> accept message
To xy@domain-2 -> relaying denied

Connection on IP-2:
TO xy@domain-2-> accept message
To xy@domain-1 -> relaying denied

(on 127.0.0.1 the message should be accepted)

Is it possible to map SMTP-users (authenticated with sasl) to a
specific ip-address?
Exmaple:
IP-Addresses: IP-1, IP-2
Users: user1-ip-1, user2-ip-1, user1-ip-2, user2-ip-2

User1-ip-1 should not be able to authenticate on IP-2


The reason for this:
We do traffic accounting based on ip-addresses. Some customers use the
ip-address of a different customer to reduce their traffic.

Thanks
Andreas

On May 13, 12:24 pm, andi <andreas.sa...@gmail.com> wrote:
> Hello,
> i'm running sendmail on a machine with multiple ip-addresses.
>
> Is it possible to map a local-host-name to a specific ip-address? if
> the mail is delivered to a different ip-address "relaying denied"
> should be returned if the user is not authenticated.
>
> Example:
> IP-Adresses: IP-1, IP-2
> local-host-names: domain-1, domain-2
>
> Sendmail should only accept mails for domain-1 on IP-1 and for
> domain-2 on IP-2 when the sending client is not authenticed.
>
> Connection on IP-1:
> TO xy@domain-1 -> accept message
> To xy@domain-2 -> relaying denied
>
> Connection on IP-2:
> TO xy@domain-2-> accept message
> To xy@domain-1 -> relaying denied
>
> (on 127.0.0.1 the message should be accepted)
>
> Is it possible to map SMTP-users (authenticated with sasl) to a
> specific ip-address?
> Exmaple:
> IP-Addresses: IP-1, IP-2
> Users: user1-ip-1, user2-ip-1, user1-ip-2, user2-ip-2
>
> User1-ip-1 should not be able to authenticate on IP-2
>
> The reason for this:
> We do traffic accounting based on ip-addresses. Some customers use the
> ip-address of a different customer to reduce their traffic.
>
> Thanks
> Andreas


sendmail rulesets can have available the daemon name utilized by the
connection.

However, I think your model is possibly broken.

As far as I see it, you'll need one sendmail process per IP, esp. as
you want to have different SASL configuration per IP.

-ska