I am an absolute newB on sendmail, now I installed sendmail, configured it (as far as i know) added localhost-names, added access entries added virtuser entry, opened port 25 in iptables.
My DNS is pointing to my server!
Now when I connect from another location on the internet, and use telnet server.com 25 and use manual SMTP commands (HELO, MAIL From etc) the mail goes and arrives and gets put to the right user. but When I use another client and it's relayed by (for example google) I get this error back:
Relaying denied. Proper authentication required. (state 14).
What setting did I forget? Any config files I need to post so you can help me?
I use CentOS 5.5 and the latest sendmail rpm
local-host-names:
localhost
localhost.localdomain
footballmatcher.com
access:
Connect:localhost.localdomain RELAY
Connect:localhost RELAY
Connect:127.0.0.1 RELAY
footballmatcher.com OK
domaintable = empty
mailertable = empty
trustedusers = empty
virtusertable = empty
sendmail.mc (extract from webmin, so firt line word is not real)
Entry type Line in configuration file Move
Other divert(-1)dnl
Other dnl #
Other dnl # This is the sendmail macro config file for m4. If you make changes to
Other dnl # /etc/mail/sendmail.mc, you will need to regenerate the
Other dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is
Other dnl # installed and then performing a
Other dnl #
Other dnl # make -C /etc/mail
Other dnl #
Other include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
Other VERSIONID(`setup for linux')dnl
OS Type OSTYPE(`linux')dnl
Other dnl #
Other dnl # Do not advertize sendmail version.
Other dnl #
Other dnl define(`confSMTP_LOGIN_MSG', `$j Sendmail; $b')dnl
Other dnl #
Other dnl # default logging level is 9, you might want to set it higher to
Other dnl # debug the configuration
Other dnl #
Other dnl define(`confLOG_LEVEL', `9')dnl
Other dnl #
Other dnl # Uncomment and edit the following line if your outgoing mail needs to
Other dnl # be sent out through an external mail server:
Other dnl #
Other dnl define(`SMART_HOST', `smtp.your.provider')dnl
Other dnl #
Define define(`confDEF_USER_ID', ``8:12'')dnl
Other dnl define(`confAUTO_REBUILD')dnl
Define define(`confTO_CONNECT', `1m')dnl
Define define(`confTRY_NULL_MX_LIST', `True')dnl
Define define(`confDONT_PROBE_INTERFACES', `True')dnl
Define define(`PROCMAIL_MAILER_PATH', `/usr/bin/procmail')dnl
Define define(`ALIAS_FILE', `/etc/aliases')dnl
Define define(`STATUS_FILE', `/var/log/mail/statistics')dnl
Define define(`UUCP_MAILER_MAX', `2000000')dnl
Define define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
Define define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
Define define(`confAUTH_OPTIONS',`A')
Other dnl #
Other dnl # The following allows relaying if the user authenticates, and disallows
Other dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links
Other dnl #
Other dnl #
Other dnl # PLAIN is the preferred plaintext authentication method and used by
Other dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do
Other dnl # use LOGIN. Other mechanisms should be used if the connection is not
Other dnl # guaranteed secure.
Other dnl # Please remember that saslauthd needs to be running for AUTH.
Other dnl #
Other TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
Define define(`confAUTH_MECHANISMS',`LOGIN PLAIN')
Other dnl #
Other dnl # Rudimentary information on creating certificates for sendmail TLS:
Other dnl # cd /etc/pki/tls/certs; make sendmail.pem
Other dnl # Complete usage:
Other dnl # make -C /etc/pki/tls/certs usage
Other dnl #
Other dnl define(`confCACERT_PATH', `/etc/pki/tls/certs')dnl
Other dnl define(`confCACERT', `/etc/pki/tls/certs/ca-bundle.crt')dnl
Other dnl define(`confSERVER_CERT', `/etc/pki/tls/certs/sendmail.pem')dnl
Other dnl define(`confSERVER_KEY', `/etc/pki/tls/certs/sendmail.pem')dnl
Other dnl #
Other dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's
Other dnl # slapd, which requires the file to be readble by group ldap
Other dnl #
Other dnl define(`confDONT_BLAME_SENDMAIL', `groupreadablekeyfile')dnl
Other dnl #
Other dnl define(`confTO_QUEUEWARN', `4h')dnl
Other dnl define(`confTO_QUEUERETURN', `5d')dnl
Other dnl define(`confQUEUE_LA', `12')dnl
Other dnl define(`confREFUSE_LA', `18')dnl
Define define(`confTO_IDENT', `0')dnl
Other dnl FEATURE(delay_checks)dnl
Feature FEATURE(`no_default_msa', `dnl')dnl
Feature FEATURE(`smrsh', `/usr/sbin/smrsh')dnl
Feature FEATURE(`mailertable', `hash -o /etc/mail/mailertable.db')dnl
Feature FEATURE(`virtusertable', `hash -o /etc/mail/virtusertable.db')dnl
Feature FEATURE(redirect)dnl
Feature FEATURE(always_add_domain)dnl
Feature FEATURE(use_cw_file)dnl
Feature FEATURE(use_ct_file)dnl
Other dnl #
Other dnl # The following limits the number of processes sendmail can fork to accept
Other dnl # incoming messages or process its message queues to 20.) sendmail refuses
Other dnl # to accept connections once it has reached its quota of child processes.
Other dnl #
Other dnl define(`confMAX_DAEMON_CHILDREN', `20')dnl
Other dnl #
Other dnl # Limits the number of new connections per second. This caps the overhead
Other dnl # incurred due to forking new sendmail processes. May be useful against
Other dnl # DoS attacks or barrages of spam. (As mentioned below, a per-IP address
Other dnl # limit would be useful but is not available as an option at this writing.)
Other dnl #
Other dnl define(`confCONNECTION_RATE_THROTTLE', `3')dnl
Other dnl #
Other dnl # The -t option will retry delivery if e.g. the user runs over his quota.
Other dnl #
Feature FEATURE(local_procmail, `', `procmail -t -Y -a $h -d $u')dnl
Feature FEATURE(`access_db', `hash -T -o /etc/mail/access.db')dnl
Feature FEATURE(`blacklist_recipients')dnl
Other EXPOSED_USER(`root')dnl
Other dnl #
Other dnl # For using Cyrus-IMAPd as POP3/IMAP server through LMTP delivery uncomment
Other dnl # the following 2 definitions and activate below in the MAILER section the
Other dnl # cyrusv2 mailer.
Other dnl #
Other dnl define(`confLOCAL_MAILER', `cyrusv2')dnl
Other dnl define(`CYRUSV2_MAILER_ARGS', `FILE /var/lib/imap/socket/lmtp')dnl
Other dnl #
Other dnl # The following causes sendmail to only listen on the IPv4 loopback address
Other dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
Other dnl # address restriction to accept email from the internet or intranet.
Other dnl #
Other DAEMON_OPTIONS(`Port=smtp,Name=MTA')dnl
Other dnl #
Other dnl # The following causes sendmail to additionally listen to port 587 for
Other dnl # mail from MUAs that authenticate. Roaming users who can't reach their
Other dnl # preferred sendmail daemon due to port 25 being blocked or redirected find
Other dnl # this useful.
Other dnl #
Other dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
Other dnl #
Other dnl # The following causes sendmail to additionally listen to port 465, but
Other dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed
Other dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't
Other dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS
Other dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps
Other dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1.
Other dnl #
Other dnl # For this to work your OpenSSL certificates must be configured.
Other dnl #
Other dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
Other dnl #
Other dnl # The following causes sendmail to additionally listen on the IPv6 loopback
Other dnl # device. Remove the loopback address restriction listen to the network.
Other dnl #
Other dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl
Other dnl #
Other dnl # enable both ipv6 and ipv4 in sendmail:
Other dnl #
Other dnl DAEMON_OPTIONS(`Name=MTA-v4, Family=inet, Name=MTA-v6, Family=inet6')
Other dnl #
Other dnl # We strongly recommend not accepting unresolvable domains if you want to
Other dnl # protect yourself from spam. However, the laptop and users on computers
Other dnl # that do not have 24x7 DNS do need this.
Other dnl #
Feature FEATURE(`accept_unresolvable_domains')dnl
Other dnl #
Other dnl FEATURE(`relay_based_on_MX')dnl
Other dnl #
Other dnl # Also accept email sent to "localhost.localdomain" as local email.
Other dnl #
Other LOCAL_DOMAIN(`localhost.localdomain')dnl
Other dnl #
Other dnl # The following example makes mail from this host and any additional
Other dnl # specified domains appear to be sent from mydomain.com
Other dnl #
Other dnl MASQUERADE_AS(`mydomain.com')dnl
Other dnl #
Other dnl # masquerade not just the headers, but the envelope as well
Other dnl #
Other dnl FEATURE(masquerade_envelope)dnl
Other dnl #
Other dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well
Other dnl #
Other dnl FEATURE(masquerade_entire_domain)dnl
Other dnl #
Other dnl MASQUERADE_DOMAIN(localhost)dnl
Other dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl
Other dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl
Other dnl MASQUERADE_DOMAIN(mydomain.lan)dnl
Mailer MAILER(smtp)dnl
Mailer MAILER(procmail)dnl
Other dnl MAILER(cyrusv2)dnl
No comments:
Post a Comment