Page 1 of 1

Relaying Denied

Posted: Sat Jul 29, 2006 11:53 am
by gronkhead
First, the preliminaries:
Domain: gronkworld.com
Server: scalix01.gronkworld.com

/etc/hosts
127.0.0.1 localhost
192.168.1.13 scalix01.gronkworld.com scalix01
192.168.1.13 gronkworld.com


/var/opt/scalix/sys/smtpd.cfg

RELAY accept 127.0.0.1
RELAY accept 192.168.1.13
RELAY accept .gronkworld.com
RELAY accept *@*.gronkworld.com
RELAY accept 192.168.1.0/255.255.255.0
RELAY Log_Reject ALL

# extra rules added to prevent open relay usage
RECIPIENT Log_Reject *@*@*
RECIPIENT Log_Reject *%*
RECIPIENT Log_Reject *!*
RECIPIENT Log_Reject *#*@*

I've added
DEBUG_LOG=TRUE

but the only contents of /var/opt/scalix/tmp/smtpd.log are:
SMTP Relay 10.0.1.3 started (6351): Mon, 24 Jul 2006 04:51:09 -0600 (MDT)
SMTP Relay 10.0.1.3 started (6475): Mon, 24 Jul 2006 05:03:32 -0600 (MDT)



I'm getting the following error in /var/log/mail for all inbound external email:

Jul 24 05:29:03 scalix01 sendmail[7057]: k6OBT3fJ007057: ruleset=check_rcpt, arg1=<Darren.Head@gronkworld.com>, relay=shawidc-mo1.cg.shawcable.net [24.71.223.10], reject=550 5.7.1 <Darren.Head@gronkworld.com>... Relaying denied
Jul 24 05:29:03 scalix01 sendmail[7057]: k6OBT3fJ007057: from=<head@shaw.ca>, size=2048, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=shawidc-mo1.cg.shawcable.net [24.71.223.10]


All services were working fine until the last server reboot... I'm wondering what I should do next?

Any help would be greatly appreciated

Posted: Tue Aug 01, 2006 6:02 pm
by ScalixSupport
Sendmail should only be listening on socket 25 for 127.0.0.1. Did you rebuild your sendmail.cf file from the sendmail.mc file recently? Try running "omsendin" and then verify that you don't have a line such as:

O DaemonPortOptions=Port=smtp,Addr=aa.bb.cc.dd, Name=MTA

where aa.bb.cc.dd is your hosts IP address.

Thanks,
Rachel

sendmail.cf contents

Posted: Sat Aug 05, 2006 9:25 am
by gronkhead
Hi Rachel,

My sendmail.cf contains the following line:

# SMTP daemon options
O DaemonPortOptions=Name=MTA

I ran the omsendin command as follows:

scalix01:~ # omsendin
NOTE: /etc/sendmail.cf unchanged. Scalix lines already active.

cmp: /opt/scalix/newconfig/submit.cf: No such file or directory
MAIL_CREATE_CONFIG set to 'no' in /etc/sysconfig/mail
NOTE: A copy of your sendmail configuration with changes for Scalix is
now in /opt/scalix/newconfig/om_submit.cf
Use /opt/scalix/newconfig/sm.update to install it.


Would you like to install the Scalix sendmail.cf file now (y/n)y

executing /opt/scalix/newconfig/sm.update

NOTE: [OMINST 608] /etc/sendmail.cf backed up to
NOTE: /etc/sendmail.cf.2 prior to changes for Scalix.

Shutting down SMTP port done
Initializing SMTP port (sendmail) done
Sendmail restarted.

scalix01:~ #


I'm still getting relay denied, though I can send outbound from SWA.

sendmail listening on port 25..same problem

Posted: Wed Aug 09, 2006 5:54 am
by e1kosau
Hi,

im also having the same problem with my system. It seems that omxport, xport.in is not talking to sendmail at all, i can see that omsmtpd is the one sending the mails to the internet. its bypassing sendmail.. the logs show that omsmtpd is establishing the connection to the remote host i.e. internet host instead of sendmail...

thanks.

log samples?

Posted: Wed Aug 09, 2006 8:05 am
by gronkhead
Hi e1kosau,

would you mind posting the snippets from your logs that helped you determine that sendmail was being bypassed?

in troubleshooting this I'm interested in learning as much as I can about the mechanics of this system.

thanks!

Posted: Wed Aug 09, 2006 3:13 pm
by e1kosau
acutally i derived the information from my netstat information. its omsmtpd that is sending out the emails and not xport.in or xport.out. I also find out that my sendmail is listening at my external interface (public IP) and the scalix smtpd is listening at my internal interface (private IP). My machine is multihomed, and when I telnet to the external interface the Sendmail daemon is the one greeting me with ESMTP. I'm trying to figure out why is this the case..