sendmail

sendmail

[Hanumanth Rao]

Hi All,

Is there any way I could block my internal users from sending mails to
hotmail.com, yahoo.com etc.
Any Info and clues please.

Regds
Rao

Re: sendmail

[Glynn Clements]

Hanumanth Rao wrote:

> Is there any way I could block my internal users from sending mails to
> hotmail.com, yahoo.com etc.
> Any Info and clues please.

With recent versions of sendmail, you can do this via access_db, e.g.

	To:@hotmail.com		REJECT
	To:@yahoo.com		REJECT

See the cf/README file for details.

-- 
Glynn Clements <glynn.clements@virgin.net>

Sendmail

[Scott Taylor]

Hello all,

I'm digging through this O'Reilly Sendmail tome and it's making me 
dizzy.  Anyone know how to make sendmail allow outgoing mail from 
192.168.1.xxx local network?  (I get Relay not allowed errors)

Thanks.

Scott.

Re: Sendmail

[Glynn Clements]

Scott Taylor wrote:

> I'm digging through this O'Reilly Sendmail tome and it's making me 
> dizzy.  Anyone know how to make sendmail allow outgoing mail from 
> 192.168.1.xxx local network?  (I get Relay not allowed errors)

This is typically controlled by the file /etc/mail/relay-domains,
although the name and location is configurable via
define(`confCR_FILE', ...). Look for a line beginning with "FR" in
sendmail.cf for the precise pathname.

The file should contain a list of IP addresses and/or domains.
Relaying is allowed if either the source IP address or the destination
domain match an entry in that file.

Unless FEATURE(relay_hosts_only) was used, you can specify partial IP
addresses (e.g. 192.168.1) or domains (e.g. foo.com) to allow a single
rule to match multiple hosts.

-- 
Glynn Clements <glynn.clements@virgin.net>

Re: Sendmail

[daniel lance herrick]

Scott Taylor wrote:

> I'm digging through this O'Reilly Sendmail tome and it's making me
> dizzy.  Anyone know how to make sendmail allow outgoing mail from
> 192.168.1.xxx local network?  (I get Relay not allowed errors)

When I recently had to persuade sendmail to
masquerade all the local hosts onto one domain
name, I ended up at

http://www.sendmail.org/m4/features.html

where there is actually a list of *all* the things
you can put in the FEATURE m4 macro. Some of the
things I needed were newer than the seventeen
pound book.

dan

Re: Sendmail

[Scott Taylor]

At 11:37 AM 11/07/02, daniel lance herrick wrote:
>Scott Taylor wrote:
>
> > I'm digging through this O'Reilly Sendmail tome and it's making me
> > dizzy.  Anyone know how to make sendmail allow outgoing mail from
> > 192.168.1.xxx local network?  (I get Relay not allowed errors)
>
>When I recently had to persuade sendmail to
>masquerade all the local hosts onto one domain
>name, I ended up at
>
>http://www.sendmail.org/m4/features.html
>
>where there is actually a list of *all* the things
>you can put in the FEATURE m4 macro. Some of the
>things I needed were newer than the seventeen
>pound book.

Good point.  So I'm guessing what I need is
relay_hosts_only
and just put: "192.168.1 RELAY" into the access file?
Anything else I should know?

This whole thing isn't making a lot of sense, guess I should have stuck 
with Procmail. =P

Re: Sendmail

[Glynn Clements]

Scott Taylor wrote:

> >  > I'm digging through this O'Reilly Sendmail tome and it's making me
> >  > dizzy.  Anyone know how to make sendmail allow outgoing mail from
> >  > 192.168.1.xxx local network?  (I get Relay not allowed errors)
> > 
> > When I recently had to persuade sendmail to
> > masquerade all the local hosts onto one domain
> > name, I ended up at
> > 
> > http://www.sendmail.org/m4/features.html
> > 
> > where there is actually a list of *all* the things
> > you can put in the FEATURE m4 macro. Some of the
> > things I needed were newer than the seventeen
> > pound book.

Note that all of this information is in the cf/README file, from the
sendmail source distribution. For pre-compiled packages, it is
normally included in the same package as all of the m4 files (e.g. 
"sendmail-cf").

> Good point.  So I'm guessing what I need is
> relay_hosts_only
> and just put: "192.168.1 RELAY" into the access file?

Actually, you don't want FEATURE(relay_hosts_only), as that would
require you to list each IP address individually.

If you want to use the access database, you need to use
FEATURE(access_db); OTOH, the relay-domains file doesn't require any
specific feature.

-- 
Glynn Clements <glynn.clements@virgin.net>

Re: Sendmail

[Scott Taylor]

At 12:04 AM 11/8/2002 +0000, Glynn Clements wrote:

>Scott Taylor wrote:
>
> > >  > I'm digging through this O'Reilly Sendmail tome and it's making me
> > >  > dizzy.  Anyone know how to make sendmail allow outgoing mail from
> > >  > 192.168.1.xxx local network?  (I get Relay not allowed errors)
> > >
> > > When I recently had to persuade sendmail to
> > > masquerade all the local hosts onto one domain
> > > name, I ended up at
> > >
> > > http://www.sendmail.org/m4/features.html
> > >
> > > where there is actually a list of *all* the things
> > > you can put in the FEATURE m4 macro. Some of the
> > > things I needed were newer than the seventeen
> > > pound book.
>
>Note that all of this information is in the cf/README file, from the
>sendmail source distribution. For pre-compiled packages, it is
>normally included in the same package as all of the m4 files (e.g.
>"sendmail-cf").
>
> > Good point.  So I'm guessing what I need is
> > relay_hosts_only
> > and just put: "192.168.1 RELAY" into the access file?
>
>Actually, you don't want FEATURE(relay_hosts_only), as that would
>require you to list each IP address individually.

Even if I did want FEATURE(relay_hosts_only), I still don't have a clue 
what to do with it.

>If you want to use the access database, you need to use
>FEATURE(access_db); OTOH, the relay-domains file doesn't require any
>specific feature.

You are making about as much sense as the book and the README.cf file.  I 
guess I'm looking for a step-by-step for something that should be quite 
simple, a how-to maybe.  Probably I'm just confused over the billion things 
that I read in this book and README file, none of which are speaking the 
same language anymore.

Cheers

where the information is Re: Sendmail

[daniel lance herrick]

On Fri, 8 Nov 2002, Glynn Clements wrote:

> Scott Taylor wrote:
>
> > >  > I'm digging through this O'Reilly Sendmail tome and it's making me
> > >  > dizzy.  Anyone know how to make sendmail allow outgoing mail from
> > >  > 192.168.1.xxx local network?  (I get Relay not allowed errors)
> > >
> > > When I recently had to persuade sendmail to
> > > masquerade all the local hosts onto one domain
> > > name, I ended up at
> > >
> > > http://www.sendmail.org/m4/features.html
> > >
> > > where there is actually a list of *all* the things
> > > you can put in the FEATURE m4 macro. Some of the
> > > things I needed were newer than the seventeen
> > > pound book.
>
> Note that all of this information is in the cf/README file, from the
> sendmail source distribution. For pre-compiled packages, it is
> normally included in the same package as all of the m4 files (e.g.
> "sendmail-cf").

Hmmmm. I see you are right.

Life would have been simpler if I had found it
there.

This list (or someone on pine-info) told me one of
the features I needed. It didn't seem to change
anything. Eventually, a google search for the
things I knew led me to the related things that I
still needed on the sendmail.org site. I think it
was a combination of three sendmail features I had
to turn on together.

I guess I owe the lists a report on what was
needed. The information is home. So, later.

dan

Re: Sendmail

[Bruce Ferrell]

[-- Attachment #1: Type: text/plain, Size: 555 bytes --]

Fairly simple actually.

In /etc/mail/access make this entry:


192.168.1 RELAY

Scott Taylor wrote:
> Hello all,
> 
> I'm digging through this O'Reilly Sendmail tome and it's making me 
> dizzy.  Anyone know how to make sendmail allow outgoing mail from 
> 192.168.1.xxx local network?  (I get Relay not allowed errors)
> 
> Thanks.
> 
> Scott.
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-admin" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 


[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3257 bytes --]

Re: Sendmail

[Glynn Clements]

Scott Taylor wrote:

> > > Good point.  So I'm guessing what I need is
> > > relay_hosts_only
> > > and just put: "192.168.1 RELAY" into the access file?
> >
> >Actually, you don't want FEATURE(relay_hosts_only), as that would
> >require you to list each IP address individually.
> 
> Even if I did want FEATURE(relay_hosts_only), I still don't have a clue 
> what to do with it.
> 
> > If you want to use the access database, you need to use
> > FEATURE(access_db); OTOH, the relay-domains file doesn't require any
> > specific feature.
> 
> You are making about as much sense as the book and the README.cf file.  I 
> guess I'm looking for a step-by-step for something that should be quite 
> simple, a how-to maybe.  Probably I'm just confused over the billion things 
> that I read in this book and README file, none of which are speaking the 
> same language anymore.

The m4 stuff is only relevant if you need to create a new sendmail.cf
file. However, if you are using a typical vendor-supplied sendmail
package, then you probably don't need to.

Look in sendmail.cf for a line which begins with "FR", e.g.

	# Hosts for which relaying is permitted ($=R)
	FR-o /etc/mail/relay-domains

Assuming that line is present, simply add the IP address (or just the
network part, e.g. 192.168.1) to the file which is listed on that line
(in the above case, /etc/mail/relay-domains), then restart the
sendmail daemon.

-- 
Glynn Clements <glynn.clements@virgin.net>

Re: Sendmail

[Glynn Clements]

Bruce Ferrell wrote:

> Fairly simple actually.
> 
> In /etc/mail/access make this entry:
> 
> 
> 192.168.1 RELAY

If you modify any of the files which have an associated .db file, you
have to force the .db file to be rebuilt. You can do this manually
with "makemap", although vendor-supplied sendmail packages typically
do this whenever sendmail is started via the init.d script (e.g. with
"/etc/rc.d/init.d/sendmail restart").

If you modify a class file (a file which is referenced by an "F"
directive in sendmail.cf), you have to restart sendmail.

If you modify a keyed map (a file which is referenced by a "K"
directive), the changes will automatically take effect once the actual
.db file is updated.

-- 
Glynn Clements <glynn.clements@virgin.net>

Re: Sendmail

[Scott Taylor]

At 07:43 AM 11/08/02, Bruce Ferrell wrote:
>Fairly simple actually.
>
>In /etc/mail/access make this entry:
>
>
>192.168.1 RELAY

Finally an answer that makes sense. :)

However, that was the first thing I did, but it didn't seem to work.  Even 
after I SIGHUP sendmail.

Something to do for access.db like newaliases does for alias table?

>Scott Taylor wrote:
>>Hello all,
>>I'm digging through this O'Reilly Sendmail tome and it's making me 
>>dizzy.  Anyone know how to make sendmail allow outgoing mail from 
>>192.168.1.xxx local network?  (I get Relay not allowed errors)
>>Thanks.
>>Scott.
>>-
>>To unsubscribe from this list: send the line "unsubscribe linux-admin" in
>>the body of a message to majordomo@vger.kernel.org
>>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
>
>

Re: Sendmail

[Bruce Ferrell]

[-- Attachment #1: Type: text/plain, Size: 1349 bytes --]

Hmmm.... Sendmail, if it's built correctly (Yeah, right!) should rebuild 
the db file for you.  If it's not built correctly, you have to figure 
out which hash program is expected and run it by hand.  The _may_ be a 
makefile for doing it too.

Scott Taylor wrote:
> At 07:43 AM 11/08/02, Bruce Ferrell wrote:
> 
>> Fairly simple actually.
>>
>> In /etc/mail/access make this entry:
>>
>>
>> 192.168.1 RELAY
> 
> 
> Finally an answer that makes sense. :)
> 
> However, that was the first thing I did, but it didn't seem to work.  
> Even after I SIGHUP sendmail.
> 
> Something to do for access.db like newaliases does for alias table?
> 
>> Scott Taylor wrote:
>>
>>> Hello all,
>>> I'm digging through this O'Reilly Sendmail tome and it's making me 
>>> dizzy.  Anyone know how to make sendmail allow outgoing mail from 
>>> 192.168.1.xxx local network?  (I get Relay not allowed errors)
>>> Thanks.
>>> Scott.
>>> -
>>> To unsubscribe from this list: send the line "unsubscribe 
>>> linux-admin" in
>>> the body of a message to majordomo@vger.kernel.org
>>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>
>>
>>
>>
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-admin" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 


[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3257 bytes --]

Re: Sendmail

[Glynn Clements]

Bruce Ferrell wrote:

> Hmmm.... Sendmail, if it's built correctly (Yeah, right!) should rebuild 
> the db file for you.  If it's not built correctly, you have to figure 
> out which hash program is expected and run it by hand.  The _may_ be a 
> makefile for doing it too.

sendmail itself doesn't attempt to rebuild keyed maps; however, it's
common for distribution vendors to do this in the
/etc/rc.d/init.d/sendmail script and/or provide a Makefile.

-- 
Glynn Clements <glynn.clements@virgin.net>

Re: Sendmail

[Scott Taylor]

At 04:32 AM 11/9/2002 +0000, you wrote:

>Bruce Ferrell wrote:
>
> > Hmmm.... Sendmail, if it's built correctly (Yeah, right!) should rebuild
> > the db file for you.  If it's not built correctly, you have to figure
> > out which hash program is expected and run it by hand.  The _may_ be a
> > makefile for doing it too.
>
>sendmail itself doesn't attempt to rebuild keyed maps; however, it's
>common for distribution vendors to do this in the
>/etc/rc.d/init.d/sendmail script and/or provide a Makefile.

That's OK Glynn,

Some of us have no problem and stay out of it when we don't know what the 
answer is.  Others top post, send attachments, request return receipts and 
blame 30 year old software vendors for not building it right.  Thus, making 
it easy for us to tell which people to ignore answers from. ;0)

Thanks for all the good answers.

Scott.