We are getting some rejected mails from a server in our data center that come from root@hostname.domain.com although if the mail comes from informix@hostname.domain.com the mail is accepted.
Here is a sample rejected mail:
Jan 11 03:43:34 pp-advdb-rpt1 sendmail[20502]: [ID 801593 mail.info]
m0B8hYO3020502: from=<root@pp-advdb-one.domain.com>, size=705,
class=0, nrcpts=1,
msgid=<200801110842.DAA19969@pp-advdb-one.domain.com>,
proto=ESMTP, daemon=MTA, relay=pp-advdb-one [xx.xx.(internal ip)xx.xx]
Jan 11 03:43:34 pp-advdb-rpt1 sendmail[20504]: [ID 801593 mail.info]
m0B8hYO3020502: to=<user@domain.com>, delay=00:00:00,
xdelay=00:00:00, mailer=esmtp, pri=120705,
relay=mail.domain.com. [xx.xx.xx.xx], dsn=5.1.3, stat=User
unknown
Jan 11 03:43:34 pp-advdb-rpt1 sendmail[20504]: [ID 801593 mail.info]
m0B8hYO3020502: m0B8hYO3020504: DSN: User unknown
Here is a similar one that is accepted from a different internal host - the difference maybe being that rpt1 has an external identity in DNS? Another example from the same first host is also accepted - just not on pp-advdb-one if from root.
Jan 11 03:31:56 pp-advdb-rpt1 sendmail[20498]: [ID 801593 mail.info]
m0B8Vu8t020498: from=<root@pp-advdb-rpt1.domain.com>, size=6514,
class=0, nrcpts=1,
msgid=<200801110831.m0B8Vu5l020497@pp-advdb-rpt1.domain.com>,
proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Jan 11 03:31:56 pp-advdb-rpt1 sendmail[20497]: [ID 801593 mail.info]
m0B8Vu5l020497: to=root, ctladdr=root (0/1), delay=00:00:00,
xdelay=00:00:00, mailer=relay, pri=36195, relay=[127.0.0.1] [127.0.0.1],
dsn=2.0.0, stat=Sent (m0B8Vu8t020498 Message accepted for delivery)
Jan 11 03:32:18 pp-advdb-rpt1 sendmail[20499]: [ID 801593 mail.info]
m0B8Vu8t020498: to=user@domain.com,
ctladdr=<root@pp-advdb-rpt1.domain.com> (0/1), delay=00:00:22,
xdelay=00:00:22, mailer=esmtp, pri=36789, relay=mail.domain.com.
[xx.xx.xx.xx], dsn=2.0.0, stat=Sent (2.0.0 m0B8Wag6031435 Message accepted
for delivery)
One from pp-advdb-one from different user that is accepted:
Jan 11 08:14:45 pp-advdb-rpt1 sendmail[21552]: [ID 801593 mail.info]
m0BDEj6R021552: from=<informix@pp-advdb-one.domain.com>, size=947,
class=0, nrcpts=3,
msgid=<200801111313.IAA03601@pp-advdb-one.domain.com>,
proto=ESMTP, daemon=MTA, relay=pp-advdb-one [xx.xx.internal ip.xx.xx]
Jan 11 08:15:04 pp-advdb-rpt1 sendmail[21554]: [ID 801593 mail.info]
m0BDEj6R021552:
to=<user@domain.com>, delay=00:00:19, xdelay=00:00:19, mailer=esmtp, pri=180947,
relay=mail.domain.com. [xx.xx.xx.xx], dsn=2.0.0, stat=Sent
(2.0.0 m0BDFU0j012877 Message accepted for delivery)
Is the root mail from pp-advdb-one getting the "user unknown" from the local relay or from the destination mail server???
This stuff makes my eyes bleed. Can anyone see what might be happening to these "user unknown" mails?