email whitelist

[MkII]

How would we go about setting up an email whitelist?

 

We want to only allow students to send and receive emails to and from addresses that we've approved globally to their groups

 

We use Exim/ Squid on our Slackware box maintained by the LEA (they also update it so changes would have to go through them, although I do have root access).

 

I'm sure it's possible but have no idea where to start. If anyone could point me to guides etc.

 

Thanks

[greenfieldsupport]

Urm, not sure.

 

We use postfix here,

to use we would add the following in our main.cf:

 

smtpd_recipient_restrictions =

reject_unauth_destination,

check_client_access hash:/etc/postfix/client_exceptions,

check_sender_access hash:/etc/postfix/sender_exceptions,

reject_rbl_client list.dsbl.org,

reject_rhsbl_sender dsn.rfc-ignorant.org

 

You would add whitelisted clients to /etc/postfix/client_exceptions

and people you dont want restricted you would add to /etc/postfix/sender_exceptions

 

 

hope this helps :S

 

sorry that its not for squid etc.

[MkII]

Sounds simple greenfieldsupport

 

If there was something similar for squid that'd be perfect

[greenfieldsupport]

May be just being supid here, but isnt squd a HTTP proxy / cache.

 

Does it handle e-mails? or do you mean your trying to filter who they send e-mail to through there webmail?

 

cause i could imagine you would find that hard :\...

 

how do the students send and recieve e-mail?

[greenfieldsupport]

if you mean the students use exim...

 

I can imagine its muchly similar to postfix,,,

 

try reading through this :

http://www.exim.org/exim-html-3.20/doc/html/spec_toc.html#TOC813

 

it should be somewhere in your exim documentation.

most likely ALMOST the same commands i can imagine.

 

Sorry that i canrt help further because i dont use exim and the idea of learning about another mail transfer agent i dont have to know scares me :\...

 

good luck!!

[greenfieldsupport]

I imagine you would not allow relay from your local domain / local hosts. and allow them only to send to certain people by using the

 

recipients_reject_except = [email protected]

 

command

 

perhaps??

dont know if exim supports a hashed or plain text file

e.g.

 

recipients_reject_except = /etc/exim/whitelist

 

that might work ??/? :\

[MkII]

Thanks gfs - I shall try looking into that!

 

I was speaking to a guy who mentioned squid having something to do with this. I'm new to it so it's all a bit above my head at the moment.

 

We use squirrelmail as webclient predominantly.