Return to auth CVS log

Up to [Research Unix] / researchv10dc / cmd / upas / config / research

Annotation of researchv10dc/cmd/upas/config/research/auth, revision 1.1

1.1     ! root        1: #! /bin/sh
        !             2: #
        !             3: #      auth - check forwarding authorization for a mail message
        !             4: #
        !             5: #      mail "from_addr" "to_addr"
        !             6: #
        !             7: #      The message is authorized if any one of the following is true:
        !             8: #              - the last hop was a gateway machine (meaning the mail
        !             9: #                      has already been approved
        !            10: #              - the path is two hops away, and we trust the
        !            11: #                      first hop.  (This is for unregistered PCs, etc.)
        !            12: #                      Warning: the list appears in two different case statements!
        !            13: #              - all hops in the "from_addr" are AT&T machines
        !            14: #              - all hops in the "to_addr" are AT&T machines
        !            15: #
        !            16: #      The addresses are in `!' notation.  We return 0 if the
        !            17: #      forwarding is approved, 1 if not approved.
        !            18: 
        !            19: ATTLIST=/usr/lib/upas/attlist
        !            20: GATES=/usr/lib/upas/gatemachines
        !            21: AUTHREJECTS=/usr/spool/mail/authrejects
        !            22: 
        !            23: 
        !            24: case $# in
        !            25: 1)     exit 0;;        # testing a forwarding address, accepted.
        !            26: 2)     ;;
        !            27: *)     echo "$0: usage: from_addr to_addr"
        !            28:        exit 255;;
        !            29: esac
        !            30: 
        !            31: from_addr="$1";        shift
        !            32: to_addr="$1";  shift
        !            33: 
        !            34: IFS="$IFS!"
        !            35: 
        !            36: set empty $from_addr
        !            37: shift                  # remove empty
        !            38: 
        !            39: case $# in
        !            40: 1)     exit 0;;        # local sender
        !            41: esac
        !            42: 
        !            43: case "$1" in
        !            44: arpa|coma|research)    exit 0;;        # our most common gates
        !            45: esac
        !            46: look -xf "$1" $GATES >/dev/null &&  exit 0     # already checked
        !            47: 
        !            48: from_inside="true"
        !            49: 
        !            50: while :
        !            51: do
        !            52:        case $# in
        !            53:                1)      break;;         # don't check sender's user name
        !            54:        esac
        !            55: 
        !            56:        case "$1" in
        !            57:                arpa|coma|uucp|tempo|*.att.com|*.ATT.COM|sf???)
        !            58:                        shift   # count this machine
        !            59:                        continue;;
        !            60:                gauss|cuuxb|mtune|attunix)
        !            61:                        shift           # we trust these guys for one more hop
        !            62:                        case "$1" in
        !            63:                                uucp)   shift;;
        !            64:                        esac
        !            65:                        case $# in
        !            66:                                0|1|2)  exit 0;;
        !            67:                        esac
        !            68:                        continue;;
        !            69:                *)
        !            70:                        look -xf "$1" $ATTLIST >/dev/null || {
        !            71:                                from_inside=false
        !            72:                                unknown_from="$1"
        !            73:                                break}
        !            74:                        shift
        !            75:                        continue;;
        !            76:        esac
        !            77: done
        !            78: 
        !            79: case $from_inside in
        !            80:        true)   exit 0;;
        !            81: esac
        !            82: 
        !            83: set empty $to_addr
        !            84: shift
        !            85: 
        !            86: while :
        !            87: do
        !            88:        case $# in
        !            89:                1)      break;;         # don't check receiver's user name
        !            90:        esac
        !            91: 
        !            92:        case "$1" in
        !            93:                arpa|coma|uucp|*.att.com|*.ATT.COM|tempo|sf???)
        !            94:                        shift   # count this machine
        !            95:                        continue;;
        !            96:                gauss|cuuxb|mtune|attunix)
        !            97:                        shift           # we trust these guys for one more hop
        !            98:                        case "$1" in
        !            99:                                uucp)   shift;;
        !           100:                        esac
        !           101:                        case $# in
        !           102:                                0|1|2)  exit 0;;
        !           103:                        esac
        !           104:                        continue;;
        !           105:                *)
        !           106:                        look -xf "$1" $ATTLIST >/dev/null || {
        !           107:                                echo Won\'t forward to non-AT\&T machines: "$unknown_from", "$1" >&2
        !           108:                                exit 1}
        !           109:                        shift
        !           110:                        continue;;
        !           111:        esac
        !           112: done
        !           113: 
        !           114: exit 0

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.