Unable to run Scalix and Sendmail at the same time

[tubs1]

We currently do not appear to be able to run Scalix and Sendmail at the same time. It appears that whichever one gets launched first attaches itself to port 25 and prevents the other one from also attaching to the port.

As you can see in the example below with sendmail running it is the only thing listening on port 25. If I shut it down then nothing is listening, a restart of Scalix allows it to listen, but now if I start sendmail it no longer listens on port 25.

Code: Select all

[root@marigold ~]# lsof -i :25
COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 3777 root    4u  IPv4  17162       TCP *:smtp (LISTEN)
[root@marigold ~]# /etc/rc.d/init.d/sendmail stop
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]
[root@marigold ~]# lsof -i :25
#[root@marigold ~]# /etc/rc.d/init.d/scalix restart
Stopping Scalix services (marigold):                       [  OK  ]
Starting Scalix services (marigold):                       [  OK  ]
[root@marigold ~]# lsof -i :25
COMMAND  PID USER   FD   TYPE DEVICE SIZE NODE NAME
omsmtpd 6094 root    4u  IPv4  46048       TCP marigold.mindsheet.com:smtp (LISTEN)
[root@marigold ~]# /etc/rc.d/init.d/sendmail start
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]
[root@marigold ~]# lsof -i :25
COMMAND  PID USER   FD   TYPE DEVICE SIZE NODE NAME
omsmtpd 6094 root    4u  IPv4  46048       TCP marigold.mindsheet.com:smtp (LISTEN)

Can anyone suggest why these programs are not getting along with each other.

I also ran the following :

Code: Select all

[root@marigold ~]# omstat -a
PC Monitor                    Started        NON-STOP       0
Directory Relay Server        Started        10:50:51
Notification Server           Started        10:50:51       0
Shared memory daemon          Started        NON-STOP
Notification Monitor          Started        NON-STOP
Session Monitor               Started        NON-STOP
Indexer                       Started        NON-STOP
Stats Daemon                  Started        NON-STOP
Container Access Monitor      Started        NON-STOP
Item Structure Server         Stopped
Database Monitor              Started        10:50:51
Licence Monitor Daemon        Started        NON-STOP
LDAP Daemon                   Started        10:50:51
Queue Manager                 Started        NON-STOP
Item Delete Daemon            Started        NON-STOP
IMAP Server Daemon            Started        10:50:51
SMTP Relay                    Partially Abor 10:50:51
Mime Browser Controller       Started        10:50:51
Event Server                  Started        10:50:51

This seems to suggest a problem with SMTP relay. I edited var/opt/scalix/<ff>/s/sys/smtpd.cfg to turn on the Debug log, restarted the SMTP Relay and here is the entire log file recorded :

Code: Select all

SMTP Relay 11.0.2.17 started (3026): Fri, 13 Apr 2007 11:17:18 +0100 (BST) for SMTP

However omstat still reports SMTP Relay as Partially Abor.

Any help welcome.

Cheers.

[swordfish]

You probably still have sendmail listening on the external IP. Modify sendmail.mc to listen only on the loopback 127.0.0.1 and regenerate the sendmail.cf file. Then restart everything again and it should work.

[tubs1]

I have the following in my /etc/mail/sendmail.mc

Code: Select all

dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS(`Port=smtp, Name=MTA')

From reading that it appears my sendmail should only be listening to the local loopback.

Swordfish : if you were referring to a different part of the sendmail.mc file can you let me know.

Thanks.

[ScalixSupport]

Hi!

For me it is:

dnl #
dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Thanks,
Subir

[tubs1]

I've made that change, remade the sendmail config file, restarted sendmail, Scalix and Scalix-Tomcat and still I only see sendmail attached to port 25:

Code: Select all

[root@marigold ~]# lsof -i :25
COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 5050 root    4u  IPv4  42069       TCP *:smtp (LISTEN)

A look at Scalix's status also shows something still amiss with SMTP Relay :

Code: Select all

[root@marigold ~]# /etc/rc.d/init.d/scalix status
*** marigold
PC Monitor                    Started        NON-STOP       0
Directory Relay Server        Started        15:04:52
Notification Server           Started        15:04:52       0
Shared memory daemon          Started        NON-STOP
Notification Monitor          Started        NON-STOP
Session Monitor               Started        NON-STOP
Indexer                       Started        NON-STOP
Stats Daemon                  Started        NON-STOP
Container Access Monitor      Started        NON-STOP
Item Structure Server         Stopped
Database Monitor              Started        15:04:52
Licence Monitor Daemon        Started        NON-STOP
LDAP Daemon                   Started        15:04:52
Queue Manager                 Started        NON-STOP
Item Delete Daemon            Started        NON-STOP
IMAP Server Daemon            Started        15:04:52
SMTP Relay                    Partially Abor 15:04:53
Mime Browser Controller       Started        15:04:53
Event Server                  Started        15:04:53
Service Router                Started        15:04:54       0
Local Delivery                Started        15:04:54       0
Internet Mail Gateway         Started        15:04:54       0
Local Client Interface        Enabled        15:04:54       0
Remote Client Interface       Enabled        15:04:54       0
Test Server                   Started        15:04:54       0
Request Server                Started        15:04:54       0
Print Server                  Started        15:04:54       0
Bulletin Board Server         Started        15:04:54       0
Background Search Service     Started        15:04:54       0
CDA Server                    Started        15:04:54       0
POP3 interface                Started        15:04:54       0
Omscan Server                 Started        15:04:54       0
Archiver                      Started        15:04:54       0

Any further ideas or any more info you need from me?

Cheers.

[swordfish]

Let's first verify that sendmail is only listening on the 127.0.0.1 interface:

Do the following: telnet 127.0.0.1 25 and post the response (change your server real name)

Then: telnet x.x.x.x 25 (where x.x.x.x) is your server IP address and post the response as well.

[florian]

please provide a

Code: Select all

lsof -i :25

cheers,
Florian.

[ScalixSupport]

Hi!

I would first suggest you to backup sendmail.cf to aviod crisis using the command:

Code: Select all

cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.orig

Coming back to the current issue,
The 127.0.0.1 line is required to allow outgoing mail to be processed, as below:

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

I would suggest you to edit the sendmail.mc to change the line in your server from:

dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS(`Port=smtp, Name=MTA')

to

dnl #
dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Rebuild the sendmail.cf file using the command below:

Code: Select all

m4 sendmail.mc > sendmail.cf

After rebuilding the sendmail.cf file from the sendmail.mc file, all of the Scalix changes
are lost and thus mail is no longer flowing, to correct this, run the command:

Code: Select all

omsendin

Now, restart sendmail and smtp relay using the commands below:
Stop and start sendmail:

Code: Select all

/etc/init.d/sendmail stop
/etc/init.d/sendmail start

Restart SMTP Relay:

Code: Select all

omoff -wd 0 smtpd
omon smtpd

Check what result you get for the command "lsof -i:25", ideally this should look like:

COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
sendmail 17999 root 3u IPv4 115968 TCP localhost.localdomain:smtp (LISTEN)
omsmtpd 18027 root 5u IPv4 116050 TCP subir-rhel4.scalix.co.in:smtp (LISTEN)

While the result for command "omstat -a" should return:

SMTP Relay Started

Hope this helps you.

Thanks,
Subir

[tubs1]

Swordfish : as requested here are the results of using telnet :

Code: Select all

[root@marigold ~]# telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
Escape character is '^]'.
220 marigold.inetprovider.co.uk ESMTP Sendmail 8.13.8/8.13.8; Tue, 17 Apr 2007 09:44:44 +0100
^]
telnet> quit
Connection closed.


[root@marigold ~]# telnet vvv.xxx.yyy.zzz 25
Trying vvv.xxx.yyy.zzz...
Connected to marigold.companyname.com (vvv.xxx.yyy.zzz).
Escape character is '^]'.
220 marigold.inetprovider.co.uk ESMTP Sendmail 8.13.8/8.13.8; Tue, 17 Apr 2007 09:44:52 +0100
^]
telnet> quit
Connection closed.

Florian : here are the results of lsof. As you can see only sendmail is registered against port 25.

Code: Select all

[root@marigold ~]# lsof -i:25
COMMAND    PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 10914 root    4u  IPv4 218014       TCP *:smtp (LISTEN)

Subir : here are the results of the process you suggested :

Code: Select all

[root@marigold mail]# cat sendmail.mc | grep DAEMON_OPTIONS
DAEMON_OPTIONS (`Port=smtp,Addr=127.0.0.1, Name=MTA')
dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl
dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6')


[root@marigold mail]# m4 sendmail.mc > sendmail.cf


[root@marigold mail]# omsendin
NOTE: /etc/mail/sendmail.cf unchanged.  Scalix lines already active.


[root@marigold mail]# /etc/init.d/sendmail stop
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]


[root@marigold mail]# /etc/init.d/sendmail start
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]


[root@marigold mail]# omoff -wd 0 smtpd
Disabling 1 subsystem(s).
SMTP Relay                  Stopped


[root@marigold mail]# omon smtpd
Enabling 1 subsystem(s).


[root@marigold mail]# lsof -i:25
COMMAND    PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 11603 root    4u  IPv4 220394       TCP *:smtp (LISTEN)


[root@marigold mail]# omstat -a
PC Monitor                    Started        NON-STOP       0
Directory Relay Server        Started        04.13.07
Notification Server           Started        04.13.07       0
Shared memory daemon          Started        NON-STOP
Notification Monitor          Started        NON-STOP
Session Monitor               Started        NON-STOP
Indexer                       Started        NON-STOP
Stats Daemon                  Started        NON-STOP
Container Access Monitor      Started        NON-STOP
Item Structure Server         Stopped
Database Monitor              Started        04.13.07
Licence Monitor Daemon        Started        NON-STOP
LDAP Daemon                   Started        04.13.07
Queue Manager                 Started        NON-STOP
Item Delete Daemon            Started        NON-STOP
IMAP Server Daemon            Started        04.13.07
SMTP Relay                    Partially Abor 09:55:59
Mime Browser Controller       Started        04.13.07
Event Server                  Started        04.13.07

As can be seen the SMTP relay still has a problem. From a variety of experiments with lsof, stopping and starting both Sendmail and Scalix the first program started gets assigned to port 25 and the second one to be started is unable to do the same. I can have Scalix running on port 25, or I can have sendmail running on it, but not both at the same time. See the example below where the order of starting the services determines which program gets registered against port 25 :

Code: Select all

[root@marigold mail]# lsof -i:25
COMMAND    PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 11793 root    4u  IPv4 220999       TCP *:smtp (LISTEN)

[root@marigold mail]# /etc/init.d/sendmail stop
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]

[root@marigold mail]# /etc/init.d/scalix stop
Stopping Scalix services (marigold):                       [  OK  ]

[root@marigold mail]# /etc/init.d/scalix start
Starting Scalix services (marigold):                       [  OK  ]

[root@marigold mail]# /etc/init.d/sendmail start
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]

[root@marigold mail]# lsof -i:25
COMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME
omsmtpd 12175 root    5u  IPv4 222413       TCP marigold.companyname.com:smtp (LISTEN)

[root@marigold mail]# /etc/init.d/scalix stop
Stopping Scalix services (marigold):                       [  OK  ]

[root@marigold mail]# /etc/init.d/sendmail stop
Shutting down sm-client:                                   [  OK  ]
Shutting down sendmail:                                    [  OK  ]

[root@marigold mail]# /etc/init.d/sendmail start
Starting sendmail:                                         [  OK  ]
Starting sm-client:                                        [  OK  ]

[root@marigold mail]# /etc/init.d/scalix start
Starting Scalix services (marigold):                       [  OK  ]

[root@marigold mail]# lsof -i:25
COMMAND    PID USER   FD   TYPE DEVICE SIZE NODE NAME
sendmail 12363 root    4u  IPv4 223380       TCP *:smtp (LISTEN)

Thanks to you all for your continuing help on this.

[ScalixSupport]

Hi Again!

No worries, lets try further, what is the value for domain, in /etc/sysconfig/sendmail file?

Thanks,
Subir

[tubs1]

The entire /etc/sysconfig/sendmail file reads :

Code: Select all

DAEMON=yes
QUEUE=1h

No mention of domain.....

[florian]

it is not the domain setting - the issue is that your sendmail is listening on the external ip address, which shouldnt be the case.

i should have asked this earlier - what OS is this? redhat? suse? somethng else? what version?

Thanks,
Florian.

[tubs1]

We are running Fedora 5.

[florian]

can you post your /etc/mail/sendmail.mc?

Florian.

[tubs1]

As requested /etc/mail/sendmail.mc :

Code: Select all

divert(-1)dnl
dnl #
dnl # This is the sendmail macro config file for m4. If you make changes to
dnl # /etc/mail/sendmail.mc, you will need to regenerate the
dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is
dnl # installed and then performing a
dnl #
dnl #     make -C /etc/mail
dnl #
include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
VERSIONID(`setup for linux')dnl
OSTYPE(`linux')dnl
dnl #
dnl # default logging level is 9, you might want to set it higher to
dnl # debug the configuration
dnl #
dnl define(`confLOG_LEVEL', `9')dnl
dnl #
dnl # Uncomment and edit the following line if your outgoing mail needs to
dnl # be sent out through an external mail server:
dnl #
define(`SMART_HOST',`mail.mycompany.biz')
dnl #
define(`confDEF_USER_ID',``8:12'')dnl
dnl define(`confAUTO_REBUILD')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST',true)dnl
define(`confDONT_PROBE_INTERFACES',true)dnl
define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl
define(`ALIAS_FILE', `/etc/aliases')dnl
define(`STATUS_FILE', `/var/log/mail/statistics')dnl
define(`UUCP_MAILER_MAX', `2000000')dnl
define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl #
dnl # The following allows relaying if the user authenticates, and disallows
dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links
dnl #
dnl define(`confAUTH_OPTIONS', `A p')dnl
dnl #
dnl # PLAIN is the preferred plaintext authentication method and used by
dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do
dnl # use LOGIN. Other mechanisms should be used if the connection is not
dnl # guaranteed secure.
dnl # Please remember that saslauthd needs to be running for AUTH.
dnl #
dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl #
dnl # Rudimentary information on creating certificates for sendmail TLS:
dnl #     cd /usr/share/ssl/certs; make sendmail.pem
dnl # Complete usage:
dnl #     make -C /usr/share/ssl/certs usage
dnl #
dnl define(`confCACERT_PATH',`/etc/pki/tls/certs')dnl
dnl define(`confCACERT',`/etc/pki/tls/certs/ca-bundle.crt')dnl
dnl define(`confSERVER_CERT',`/etc/pki/tls/certs/sendmail.pem')dnl
dnl define(`confSERVER_KEY',`/etc/pki/tls/certs/sendmail.pem')dnl
dnl #
dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's
dnl # slapd, which requires the file to be readble by group ldap
dnl #
dnl define(`confDONT_BLAME_SENDMAIL',`groupreadablekeyfile')dnl
dnl #
dnl define(`confTO_QUEUEWARN', `4h')dnl
dnl define(`confTO_QUEUERETURN', `5d')dnl
dnl define(`confQUEUE_LA', `12')dnl
dnl define(`confREFUSE_LA', `18')dnl
define(`confTO_IDENT', `0')dnl
dnl FEATURE(delay_checks)dnl
FEATURE(`no_default_msa',`dnl')dnl
FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
dnl #
dnl # The following limits the number of processes sendmail can fork to accept
dnl # incoming messages or process its message queues to 12.) sendmail refuses
dnl # to accept connections once it has reached its quota of child processes.
dnl #
dnl define(`confMAX_DAEMON_CHILDREN', 12)dnl
dnl #
dnl # Limits the number of new connections per second. This caps the overhead
dnl # incurred due to forking new sendmail processes. May be useful against
dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address
dnl # limit would be useful but is not available as an option at this writing.)
dnl #
dnl define(`confCONNECTION_RATE_THROTTLE', 3)dnl
dnl #
dnl # The -t option will retry delivery if e.g. the user runs over his quota.
dnl #
FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`blacklist_recipients')dnl
EXPOSED_USER(`root')dnl
dnl #
dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment
dnl # the following 2 definitions and activate below in the MAILER section the
dnl # cyrusv2 mailer.
dnl #
dnl define(`confLOCAL_MAILER', `cyrusv2')dnl
dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl
dnl #
dnl # The following causes sendmail to only listen on the IPv4 loopback address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
DAEMON_OPTIONS (`Port=smtp,Addr=127.0.0.1, Name=MTA')
dnl #
dnl # The following causes sendmail to additionally listen to port 587 for
dnl # mail from MUAs that authenticate. Roaming users who can't reach their
dnl # preferred sendmail daemon due to port 25 being blocked or redirected find
dnl # this useful.
dnl #
dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
dnl #
dnl # The following causes sendmail to additionally listen to port 465, but
dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed
dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't
dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS
dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps
dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1.
dnl #
dnl # For this to work your OpenSSL certificates must be configured.
dnl #
dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
dnl #
dnl # The following causes sendmail to additionally listen on the IPv6 loopback
dnl # device. Remove the loopback address restriction listen to the network.
dnl #
dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl
dnl #
dnl # enable both ipv6 and ipv4 in sendmail:
dnl #
dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6')
dnl #
dnl # We strongly recommend not accepting unresolvable domains if you want to
dnl # protect yourself from spam. However, the laptop and users on computers
dnl # that do not have 24x7 DNS do need this.
dnl #
FEATURE(`accept_unresolvable_domains')dnl
dnl #
dnl FEATURE(`relay_based_on_MX')dnl
dnl #
dnl # Also accept email sent to "localhost.localdomain" as local email.
dnl #
LOCAL_DOMAIN(`mail.mycompany.biz')
dnl #
dnl # The following example makes mail from this host and any additional
dnl # specified domains appear to be sent from mydomain.com
dnl #
MASQUERADE_AS(`mail.mycompany.biz')
dnl #
dnl # masquerade not just the headers, but the envelope as well
dnl #
FEATURE(masquerade_envelope)
dnl #
dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well
dnl #
dnl FEATURE(masquerade_entire_domain)dnl
dnl #
dnl MASQUERADE_DOMAIN(localhost)dnl
dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl
dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl
dnl MASQUERADE_DOMAIN(mydomain.lan)dnl
FEATURE(allmasquerade)
MAILER(smtp)dnl
MAILER(procmail)dnl
dnl MAILER(cyrusv2)dnl
MAILER(scalix)dnl

Cheers.