Well, I thought everything was working, but sendmail won't receive mail. 1) Doing a status on sendmail says its running 2) dig says that named is running on that server and returns all proper looking info. 3) I had saved the WORKING access, local-host-names and virtusertable files before replacing the bad hard drive and had copied them back into /etc/mail and done a make, so I assume they're good 4) I just restarted the mail server, which logged the following: Sep 3 19:03:39 boron sendmail[2674]: alias database /etc/aliases rebuilt by root Sep 3 19:03:39 boron sendmail[2674]: /etc/aliases: 40 aliases, longest 10 bytes, 395 bytes total Sep 3 19:03:40 boron sendmail[2687]: starting daemon (8.11.6): SMTP+queueing@01:00:00 The test mailing has the following entries in the SENDING sendmail log, and NO entries in the receiving sendmail log or firewall log: Sep 3 17:12:40 bach sendmail[11154]: g83LCec11154: from=<dick@goodman1.net>, size=385, class=0, nrc pts=1, msgid=<4.2.0.58.20020903171330.00a3f418@pop.goodman1.net>, proto=ESMTP, daemon=MTA, relay=hos t3.goodman1.net [192.168.1.3] Sep 3 17:12:41 bach sendmail[11156]: g83LCec11154: to=<r.goodman@11harvard.com>, ctladdr=<dick@good man1.net> (503/503), delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=30385, relay=11harvard.com. [66.92.78.250], dsn=4.0.0, stat=Deferred: Connection refused by 11harvard.com. and the following on a retry Sep 3 18:23:52 bach sendmail[11217]: g83LCec11154: to=<r.goodman@11harvard.com>, ctladdr=<dick@good man1.net> (503/503), delay=01:11:12, xdelay=00:00:00, mailer=esmtp, pri=210385, relay=11harvard.com. [66.92.78.250], dsn=4.0.0, stat=Deferred: Connection refused by 11harvard.com. I have three similar servers (the other two still RH7.0) and I have never touched the sendmail config - only the access, local-host-names and virtusertable files on any of them. Has something changed between the versions of sendmail on RH7.0 and RH7.3 or have I missed something. The lack of any message on the receiving server puzzles me. Or has something changed in named relating to mail? Dick
On Tue, Sep 03, 2002 at 07:33:49PM -0400, Richard Goodman wrote: dick> Well, I thought everything was working, but sendmail won't receive mail. dick> Has something changed between the versions of sendmail on RH7.0 and RH7.3 Yes, exactly. Red Hat (or Sendmail, I forget) changed the default for sendmail to listen only on 127.0.0.1, to prevent insecure default open mail relays. This is mentioned in the Red Hat 7.3 Release Notes.... To fix it, edit /etc/mail/sendmail.mc. Find the line with "Port=smtp,Addr=127.0.0.1, Name=MTA". Comment it out by putting dnl at the beginning of that line. Then regenerate the /etc/sendmail.cf from the mc file like this: m4 /etc/mail/sendmail.mc > /etc/sendmail.cf And please limit access to sendmail properly so you don't become an open relay (/etc/mail/access)! -- Charles R. Anderson <cra@wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886
That did the trick! Not only that, there's a comment in the sendmail.mc file just above that line -- only as a non-techie I never looked in sendmail.mc While I was at it I also dnl'd out the FEATURE("accept_unresolvable_domains") line. I believe my access file is tight enough - its been bouncing lots of attempted open relaying for months. Dick
On Tue, Sep 03, 2002 at 07:33:49PM -0400, Richard Goodman wrote: dick> Well, I thought everything was working, but sendmail won't receive mail. dick> Has something changed between the versions of sendmail on RH7.0 and RH7.3
Yes, exactly. Red Hat (or Sendmail, I forget) changed the default for sendmail to listen only on 127.0.0.1, to prevent insecure default open mail relays. This is mentioned in the Red Hat 7.3 Release Notes....
To fix it, edit /etc/mail/sendmail.mc. Find the line with "Port=smtp,Addr=127.0.0.1, Name=MTA". Comment it out by putting dnl at the beginning of that line. Then regenerate the /etc/sendmail.cf from the mc file like this:
m4 /etc/mail/sendmail.mc > /etc/sendmail.cf
And please limit access to sendmail properly so you don't become an open relay (/etc/mail/access)!
-- Charles R. Anderson <cra@wpi.edu> / http://angus.ind.wpi.edu/~cra/
participants (2)
-
Charles R. Anderson -
Richard Goodman