allowing only internal mails (sending as well receiving)

[Chakrapani.Gadudas]

Hi,

is it possible to restrict some mailbox to receive and send mail to only inside the domain?

-Chakri

[schmoe90]

Yes, with Service Levels and Service Router rulesets...

[Chakrapani.Gadudas]

can you please explain one example if possible.....

[les]

can you please explain one example if possible.....

Here is a working example:

First create rulesets to be applied to the internet route. replace xx with your directory name.

Place two files in /var/opt/scalix/xx/s/rules with the following content:

filename: noinetrcv
RECIPIENT-SERVICE-LEVEL=15 ORIGINATOR="*/internet" NDN-INFO="User Unknown" ACTION=REJECT
RECIPIENT-SERVICE-LEVEL=25 ORIGINATOR="*/internet" NDN-INFO="User Unknown" ACTION=REJECT

filename: noinetsnd
SENDER-SERVICE-LEVEL=10 NDN-INFO="You do not have permission to send to external addresses" ACTION=REJECT
SENDER-SERVICE-LEVEL=25 NDN-INFO="You do not have permission to send to external addresses" ACTION=REJECT

Then apply these rulesets

ommodrt -m <mailnode> -d noinetrcv # where mailnode is the mailnode of the system
ommodrt -m internet -d noinetsnd
ommodrt -m internet,tnef -d noinetsnd
omoff -d0 rtr
omon rtr

No you can use ommodu to apply restrictions on a per user basis.

/opt/scalix/bin/ommodu -o "<Common Name>" -s "Service Level"
where
Common Name is the full name enclosed in quotes, I.e. "Les Stott"
Service Level = 0 - normal, no restrictions
Service Level = 10 - Cannot Send Email to the Internet
Service Level = 15 - Cannot Receive from the Internet
Service Level = 25 - Cannot Send to or Receive from the Internet

Note: The <Common Name> is made up of the first and last names. If either of those have spaces inside
them you need to escape the <space> with a "".
i.e. Joe Smith Jones (where Joe is first name and "Smith Jones" is last name) needs to be entered
as Joe Smith\ Jones on the command line.

[the2nd]

is it possible to whitelist a domain (e.g. mydomain.com) so that a user can send external mail to this domain but not to any other?

regards
the2nd