[SuSE Linux] HELP! I don't want my box to relay!
It's a sendmail thing, but it must be so standard that someone's going to know how to do it surely? I just need my box to reject attempts to post through it (eg: other hosts trying to post mail to other hosts via my host) as a basic and I understand common anti-spam measure. Naturally, I still want this box to be able to receive mail being sent to local user accounts on it, and I want to be able to send mail from those local user accounts. It's a SuSE box, with sendmail.cf currently sitting as written out by YaST, so a very standard configuration. I was able to post from my laptop (behind a masquerading host here) through the remote server - ie: that server being configured here as my SMTP server - to my Hotmail account. How do I stop this and get that "We do not relay" error that I've seen coming from other servers? TIA -- Rachel -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
Rachel Greenham <rachel@enlarion.demon.co.uk> wrote:
It's a SuSE box, with sendmail.cf currently sitting as written out by YaST, so a very standard configuration. I was able to post from my laptop (behind a masquerading host here) through the remote server - ie: that server being configured here as my SMTP server - to my Hotmail account.
How do I stop this and get that "We do not relay" error that I've seen coming from other servers?
What version of sendmail are you running (i.e. what SuSE version)? Sendmail 8.9.x (as of SuSE 6.1) includes built-in Anti-Relaying support and this is enabled by default. I just hope that YaST doesn't disable it... I personally don't let YaST create my sendmail.cf but do that myself (using m4 macros - pretty easy actually). If you are interested I can send you my ".mc" (m4 input) file (used the /etc/mail/linux.mc that comes with SuSE as basis). Andreas -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
On 2 Jun 1999, Andreas Gerstlauer wrote: ...
I personally don't let YaST create my sendmail.cf but do that myself (using m4 macros - pretty easy actually). If you are interested I can send you my ".mc" (m4 input) file (used the /etc/mail/linux.mc that comes with SuSE as basis).
See /sbin/conf.d/SuSEconfig.sendmail for how SuSEconfig creates a sendmail.cf. It's straightforward and easy to read. The script uses the sendmail-related variables set in /etc/rc.config and the standard m4 sendmail macros. -- Michael Hasenstein <A HREF="http://www.csn.tu-chemnitz.de/~mha/"><A HREF="http://www.csn.tu-chemnitz.de/~mha/</A">http://www.csn.tu-chemnitz.de/~mha/</A</A>> Private Pilot (ASEL) since 1998 -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
In message <<A HREF="msg00110.html">Pine.LNX.4.10.9906021014380.30819-100000@Benjy</A>> Michael Hasenstein <mha@suse.de> wrote:
On 2 Jun 1999, Andreas Gerstlauer wrote: ...
I personally don't let YaST create my sendmail.cf but do that myself (using m4 macros - pretty easy actually). If you are interested I can send you my ".mc" (m4 input) file (used the /etc/mail/linux.mc that comes with SuSE as basis).
See /sbin/conf.d/SuSEconfig.sendmail for how SuSEconfig creates a sendmail.cf. It's straightforward and easy to read. The script uses the sendmail-related variables set in /etc/rc.config and the standard m4 sendmail macros.
I've done it. SuSE 6.0 runs Sendmail 8.8.8 - I went to sendmail.org and found their notes on how to do it and applied it verbatim. Works perfectly (though I have to stop Yast from rewriting the sendmail.cf now). -- Rachel <A HREF="http://www.enlarion.demon.co.uk/"><A HREF="http://www.enlarion.demon.co.uk/</A">http://www.enlarion.demon.co.uk/</A</A>> -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
Hi, On Wed, 2 Jun 1999, Rachel Greenham wrote:
SuSE 6.0 runs Sendmail 8.8.8 - I went to sendmail.org and found their notes on how to do it and applied it verbatim. Works perfectly (though I have to stop Yast from rewriting the sendmail.cf now).
If you want to make it "YaST-friendly", do the following: look at /sbin/conf.d/SuSEconfig.sendmail and look for this: MAILER(\`uucp')dnl MAILER(\`bsmtp')dnl MAILER(\`fido')dnl Now add the following two lines: HACK(\`use_ip',\`/etc/mail/LocalIP')dnl HACL(\`check_rcpt4')dnl Now create the file /etc/mail/LocalIP, which contains the IP-adresses of all hosts which you want to allow to relay (one line per IP). Don't forget 127.0.0.1 and the server's own IP address! Now call "SuSEconfig" which will create the new sendmail configuration. Restart sendmail afterwards using "rcsendmail restart". Bye, LenZ -- ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH <A HREF="mailto:grimmer@suse.de">mailto:grimmer@suse.de</A> Schanzaeckerstr. 10 <A HREF="http://www.suse.de/~grimmer"><A HREF="http://www.suse.de/~grimmer</A">http://www.suse.de/~grimmer</A</A>> 90443 Nuernberg, Germany -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
On Wed, 2 Jun 1999, Rachel Greenham wrote:
It's a sendmail thing, but it must be so standard that someone's going to know how to do it surely?
I just need my box to reject attempts to post through it (eg: other hosts trying to post mail to other hosts via my host) as a basic and I understand common anti-spam measure. Naturally, I still want this box to be able to receive mail being sent to local user accounts on it, and I want to be able to send mail from those local user accounts.
It's a SuSE box, with sendmail.cf currently sitting as written out by YaST, so a very standard configuration. I was able to post from my laptop (behind a masquerading host here) through the remote server - ie: that server being configured here as my SMTP server - to my Hotmail account.
How do I stop this and get that "We do not relay" error that I've seen coming from other servers?
It depends which version of sendmail you're running. 8.9.x have relaying disabled by default, so if you're being allowed to relay through your box look for one or more FEATURE lines containing 'relay' in the sendmail.mc file, or hosts set as being allowed to relay in your access database. Earlier versions allowed relaying by default and had to be set up to prevent it through one of the anti-spam hacks. If you're running one of those versions it's really much easier to upgrade to 8.9.x than to fiddle with it. Drop me a line if you'd like to see a copy of my sendmail config. I generate my own through m4 BTW, having told YaST not to touch it. Phil -- Philip Stokes Email: phil@stokes.demon.co.uk Fax: +44 (0)870 164 1242 -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>
participants (5)
-
gerstl@ics.uci.edu
-
grimmer@suse.de
-
mha@suse.de
-
phil@stokes.demon.co.uk
-
rachel@enlarion.demon.co.uk