Page 1 of 1

Domain masquerading problem

Posted: Tue Dec 23, 2008 3:03 pm
by criptus
I've been testing Scalix 11.4 (CentOS 5.2) for a month, and must admit It works outstanding with MS outlook inside my LAN. Great job to all of you :!:

Unfortunately, there is one and only problem wich has left unsolved, no matter what I try to do. The domain added to the sender's e-mail is allways local DNS domain (srv.domain.com), so due to the fact that this isn't a valid public domain, every e-mail is treated as SPAM and isn't delivered to the outside recipients.

I manage small network where outside MX server and DNS are used. I'd not change this, so I decided to 'grab' e-mails from outside mailbox using fetchmail. It works fine, outside messages are transfered to local scalix users every 5 minutes.

As I mentioned I only have problem sending messages from outlook to outside recipients. There is allways local domain added after sender first.last@srv.domain.com (should be first.last@domain.com - valid mail accounts living on the outside MX server).

I did this:
- Set outside smpt server as smarthost (sendmail.mc), so every mail has been sent to the contract mail provider. I checked with my provider and every mail actualy arrived to the server where was rejected because of this unvalid domain.
So far so good.
- Then I edited sendmail.mc to masquerade domains but - nothing really happend.

What I did wrong?

There are some examples foud on this forum and wiki, but It seems I'am doing something wrong ...

Can please someone tell me what I have to do, to solve this annoying problem. I'd be very thankfull for that!

regards, criptus

Posted: Tue Dec 23, 2008 5:15 pm
by bikerider
did you run the m4 until after you edited ?

Posted: Tue Dec 23, 2008 5:27 pm
by criptus
I did this:

make -C /etc/mail
and restart sendmail...

Posted: Tue Dec 23, 2008 5:57 pm
by criptus
I followed this solution:

http://www.howtoforge.com/configuring-s ... om-address

After editing I ran:

m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
make -C /etc/mail
and restart sendmail...

No success...

Is there anything to be changed somewhere else to? Scalix?

Posted: Wed Dec 24, 2008 12:17 pm
by criptus
I also tried this:

http://www.madboa.com/geek/sendmail-genericstable/

and sent mail both from CLI and scalix

No results at all !!!

:x

Ideas?

I must admit I have no skills with sendmail at all. I prefer postfix. So what else to do? Please!

Posted: Fri Dec 26, 2008 12:23 pm
by schmoe90
Check the IA attribute for your users... that's what gets stamped on outgoing messages from Outlook:

# omshowu -n one
Authentication ID: Test.One@fubar.com
Globally Unique ID: 1510000081b15394-68.061.012.76
User Name : Test One /CN=Test One
MailNode : fubar
Internet Address : "Test One" <Test.One@fubar.com>
...

You can change this with ommodu and stop it setting up adddresses like this in the mailnode setup - omshowmn, ommodmn -D...

Posted: Sun Dec 28, 2008 2:31 am
by criptus
Can I simply disable Automatic Internet Address Mapping, and how shall I do that?

Posted: Mon Dec 29, 2008 5:21 am
by criptus
OK. I solved domain masquerading problem (sendmail settings) and there is another one...

My ISP through which I relay my oudbound e-mails, demands sender authentication.

I followed this instructions: http://www.joreybump.com/code/howto/smtpauth.html , but there is a problem. If I test SMTP transaction (sendmail -bD -X /tmp/test.log), I get this:

451 4.0.0 opendaemonsocket: daemon MTA: cannot bind: Address already in use

eventhough if I shut sendmail down!!! It means, that there is another process listening on port 25! Telnet to 25 also responses...

Is there anything elese beside sendmail (scalix service) listening on port 25?

Posted: Mon Dec 29, 2008 8:32 am
by les
criptus wrote:OK. I solved domain masquerading problem (sendmail settings) and there is another one...

My ISP through which I relay my oudbound e-mails, demands sender authentication.

I followed this instructions: http://www.joreybump.com/code/howto/smtpauth.html , but there is a problem. If I test SMTP transaction (sendmail -bD -X /tmp/test.log), I get this:

451 4.0.0 opendaemonsocket: daemon MTA: cannot bind: Address already in use

eventhough if I shut sendmail down!!! It means, that there is another process listening on port 25! Telnet to 25 also responses...

Is there anything elese beside sendmail (scalix service) listening on port 25?


Sendmail is a seperate package. Scalix has its own smtp daemon, listening on all interfaces on port 25, EXCEPT for localhost. Sendmail listens on localhost on port 25.

The way it works...scalix receives mail from external sources to its own smtpd daemon. When you send to external contacts via scalix it hands off to sendmail to deliver that email.
Even if you filter via sendmail/spamassassin/clamav scalix still receives using its own smtp daemon.

It sounds like the test you describe requires to run sendmail in the foreground. Thus it would attempt to listen on all interfaces. You can stop scalix and sendmail to run your test, but be aware that receiving mail during the test period will likely not work as scalix is not listening, so firewall incoming email temporarily.

Posted: Mon Dec 29, 2008 10:01 am
by criptus
I see.

How can I than set up scalix, to receive mail from external sources (pop3)? At the moment, I grab mail from external sources with fetchmail. It works fine but obviuesly, there are other solutions?

Posted: Mon Dec 29, 2008 2:57 pm
by schmoe90
You'd carry on using fetchmail.