Unknow users

[rfulgado]

Hi There,

I was wondering how can I stop sendmail from trying to deliver to a non-existing user on our domain. We get email (mostly spam) sent to
some of our previous employees. mailq looks like this:

k51H6Lmd006533 975 Thu Jun 1 13:06 <my_account@gmail.com>
(Deferred: Connection timed out with our_domain.com.)
<unkown_user@our_domain.com>
Total requests: 1


Here's output of sendmail -bv on an unknow user.

sendmail -bv unknown_user@our_domain.com

unknown_user@our_domain.com... deliverable: mailer esmtp, host our_domain.com., user unknown_user@our_domain.com


Here's the output for valid user.

sendmail -bv valid_user@dmtserv.com

valid_user@our_domain.com... deliverable: mailer scalix, host smtp2, user valid_user@our_domain.com

thanks

[ScalixSupport]

You need to add your domains to /etc/mail/local-host-names and restart sendmail.

Cheers

Dave

[rfulgado]

I have the said file and our domain name is there. Yet the server still tries
to deliver to unknown users.


here's another sample. I didn't bother to hide our domain.

mailq
/var/spool/mqueue (3 requests)
-----Q-ID----- --Size-- -----Q-Time----- ------------Sender/Recipient-----------
k51IvPn8010991* 967 Thu Jun 1 14:57 <rfulgado@gmail.com>
<david@dmtserv.com>
k51IvPcD010985* 967 Thu Jun 1 14:57 <rfulgado@gmail.com>
<daniels@dmtserv.com>
k51Ir8bV010623 967 Thu Jun 1 14:53 <rfulgado@gmail.com>
(Deferred: Connection timed out with dmtserv.com.)
<errol@dmtserv.com>
Total requests: 3

david, daniels and errol does not exist as regular unix users in
our mail server or scalix users.

[ScalixSupport]

Could you please paste the relevant portion form the sendmail logfile?

Thanks,

Sascha.

[rfulgado]

mailq

k52B9T86032316* 20125 Fri Jun 2 07:09 <newsletter@elabs3.com>
(Deferred: Connection timed out with dmtserv.com.)
<dchapman@dmtserv.com>


grep k52B9T86032316 /var/log/maillog | head

Jun 2 07:09:30 smtp2 sendmail[32316]: k52B9T86032316: from=<newsletter@elabs3.com>, size=20836, class=0, nrcpts=1, msgid=<20060602110340.EC4D8110F4B@vance2.elabs3.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Jun 2 07:09:30 smtp2 sendmail[32316]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=00:00:01, mailer=esmtp, pri=50836, stat=queued
Jun 2 07:09:30 smtp2 sendmail[32315]: k52B9TIk032315: to=<dchapman@dmtserv.com>, delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=50652, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (k52B9T86032316 Message accepted for delivery)
Jun 2 07:11:34 smtp2 sendmail[32331]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=00:02:05, xdelay=00:02:00, mailer=esmtp, pri=140836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 07:28:29 smtp2 sendmail[32597]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=00:19:00, xdelay=00:02:00, mailer=esmtp, pri=230836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 07:43:29 smtp2 sendmail[312]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=00:34:00, xdelay=00:02:00, mailer=esmtp, pri=320836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 07:58:29 smtp2 sendmail[645]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=00:49:00, xdelay=00:02:00, mailer=esmtp, pri=410836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 08:13:29 smtp2 sendmail[1062]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=01:04:00, xdelay=00:02:00, mailer=esmtp, pri=500836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 08:28:29 smtp2 sendmail[1318]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=01:19:00, xdelay=00:02:00, mailer=esmtp, pri=590836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.
Jun 2 08:43:35 smtp2 sendmail[1536]: k52B9T86032316: to=<dchapman@dmtserv.com>, delay=01:34:06, xdelay=00:02:01, mailer=esmtp, pri=680836, relay=dmtserv.com. [66.11.95.66], dsn=4.0.0, stat=Deferred: Connection timed out with dmtserv.com.

[rfulgado]

I appended what I have in /etc/mail/local-host-names to /etc/mail/sendmail.cf's
Cw macro.

Cwlocalhost dmtserv.com smtp2.dmtserv.com

Now I got a "User unknow" in my maillog.

Jun 2 15:19:50 smtp2 sendmail[16138]: k52JJnWn016138: to=<errol@dmtserv.com>, delay=00:00:01, xdelay=00:00:01, mailer=relay, pri=31821, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (k52JJnei016139 Message accepted for delivery)
Jun 2 15:19:52 smtp2 MailScanner[13727]: New Batch: Scanning 1 messages, 2532 bytes
Jun 2 15:19:57 smtp2 MailScanner[13727]: Virus and Content Scanning: Starting
Jun 2 15:19:58 smtp2 MailScanner[13727]: Uninfected: Delivered 1 messages
Jun 2 15:19:58 smtp2 MailScanner[13727]: Batch (1 message) processed in 6.76 seconds
Jun 2 15:19:59 smtp2 sendmail[16155]: k52JJnei016139: to=<errol@dmtserv.com>, delay=00:00:09, mailer=local, pri=122002, dsn=5.1.1, stat=User unknown
Jun 2 15:19:59 smtp2 sendmail[16155]: k52JJnei016139: k52JJwXD016155: DSN: User unknown

[ScalixSupport]

I see you are using mailscanner. Any chance of you having rebuilt sendmail.cf? If so, please run omsendin to reenable the Scalix extensions.

Cheers,

Sascha.

[rfulgado]

Yes, I did run omsendin after making some changes in sendmail.mc and
creating the cf file using m4.

Anyway, it's working fine now, I don't get anymore notice of failed delivery for
unknown users in our domain.

Thanks a bunch,
roberto