terry white wrote: > i have sendmail configured to use 'access', and for the most part > seems to work fine. however. > > i have 'bulk' denied "hotmail" and the like. how do i go about > allowing 'user@xxxxxxxxxxxxxxxxxxx'. the following fails in that regard: > > "user@*.yahoo.com OK" ... You can't. At least, not by simply adding entries to the access map; you would have to either change the rulesets which use the access map, or change the way in which the access map operates. The domain part will be tested against the actual domain plus all parent domains, i.e. user@xxxxxxxxxxxxxxxxxxx will result in lookups for blah.blah.yahoo.com, blah.yahoo.com, yahoo.com and com. However, the full address (with the user@ part) is only tested with the exact domain. In summary, passing user@xxxxxxxxxxxxxxxxxxx to the check_mail ruleset will result in the following keys being looked up in the access map: From:user@xxxxxxxxxxxxxxxxxxx user@xxxxxxxxxxxxxxxxxxx From:user@ user@ From:blah.blah.yahoo.com blah.blah.yahoo.com From:blah.yahoo.com blah.yahoo.com From:yahoo.com yahoo.com From:com com Keyed map lookups are always exact-match; there are no wildcards or similar functionality. The simplest workaround which I can think of is to hardwire an exception into the access map, e.g. (untested): # Access list database (for spam stomping) Kaccess0 regex -aOK user@.*\.yahoo.com Kaccess1 hash -o /etc/mail/access.db Kaccess sequence test access Doing this for many addresses would quickly become impractical. In that situation, you would need see if one of the other supported map types (see §5.9 of the manual) supports wildcarded keys (the last resort would be the "prog" type, but that's extremely inefficient). -- Glynn Clements <glynn.clements@xxxxxxxxxx> - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
