I think my sendmail is not correctly set. It says the default is to disallow relaying. I am running centos 4.8 and I think sendmail is relaying for anything. Based on this: http://www.sendmail.org/~ca/email/chk-89f.html#RELAYING I added|: FEATURE(relay_hosts_only) to my sendmail.mc file and restarted sendmail. I am still seeing connects that get relayed and are not in my /etc/mail/access file. Is there something else I am missing? Thanks, |Jerry
On Thu, 27 May 2010, Jerry Geis wrote:> I think my sendmail is not correctly set. It says the default is to > disallow relaying. > I am running centos 4.8 and I think sendmail is relaying for anything. > > Based on this: > http://www.sendmail.org/~ca/email/chk-89f.html#RELAYING > > I added|: > FEATURE(relay_hosts_only) > to my sendmail.mc file and restarted sendmail. I am still seeing > connects that get relayed and are > not in my /etc/mail/access file.I assume that means you got a rebuilt sendmail.cf before restarting sendmail, but you'll want to make sure. I also assume that you've defined the access_db feature in your sendmail.mc file. That said, I don't include the relay_hosts_only FEATURE at all. I just add the IP addresses of the hosts that can relay into the access file, e.g., 1.2.3.4 RELAY Works for me. -- Paul Heinlein <> heinlein at madboa.com <> http://www.madboa.com/
On 5/27/2010 4:16 PM, Jerry Geis wrote:> I think my sendmail is not correctly set. It says the default is to > disallow relaying. > I am running centos 4.8 and I think sendmail is relaying for anything. > > Based on this: > http://www.sendmail.org/~ca/email/chk-89f.html#RELAYING > > I added|: > FEATURE(relay_hosts_only) > to my sendmail.mc file and restarted sendmail. I am still seeing > connects that get relayed and are > not in my /etc/mail/access file. > > Is there something else I am missing?How much have you changed from the stock sendmail.mc? The default should (a) only accept connections from localhost (127.0.0.1), and (b) even when you remove that restriction should only accept messages where the server is the final destination unless it is from a source explicitly permitted in the access file. -- Les Mikesell lesmikesell at gmail.com