box to box smtp relay

[Richard Briggs]

Scenario:

o Box A needs to send mail to TARGET (a relay host) but is not allowed to reach it/ping it.

o Box A can reach Box B

o Box B CAN reach the TARGET.


how can I make Box B accept and forward mail from Box A to TARGET?

That is:

mail on Box A -> relayed by Box B -> TARGET?

[A. Clay Stephenson]

Hi:

All you should need to do is enable the 'Smart Relay' macro on BoxA, viz:
DSBoxB

You may also need to define the Dj macro if you are not using DNS and thus don't have fully qualified hostnames.


in /etc/mail/sendmail.cf. After making the changes stop/start sendmail on Box A and you should be done.

[Kevin Wright]

You may also need to modify the FR macro in sendmail.cf on box b, to forward mail from box a through box b. edit the /etc/mail/relay-domains file

[Richard Briggs]

Now on box B, I'm getting:

NAA07171: Ruleset check_rcpt () rejection: 571 ... we do not relay

[A. Clay Stephenson]

Good catch; I missed the forward part of the question.

[Michael Elleby III_1]

Hello Richard:

Please correct me if I am wrong:

It sounds like there is a firewall between box A and box B. If so, make sure your Firewall Admin will allow this traffic as well as associated traffic through, since you say that Box A cannot ping Box B, but can send mail to it because in addition to allowing traffic on port 25 (sendmail), I believe it also has to allow ping to get through also, since both machines have to send messages and acknoledgements before it even attempts to send the message(s).

Hope this helps.

Mike-

[Richard Briggs]

Mike...

I did not say that Box A and Box B couldn't ping each other.

Box A cannot reach/ping TARGET RELAY HOST (For sake of discussion let's call that BOX C)

A can ping B
A cannot ping C

B can ping A
B can ping C

C can ping B
C cannot ping A

[Michael Elleby III_1]

Sorry Richard, I was just looking at this line:

o Box A needs to send mail to TARGET (a relay host) but is not allowed to reach it/ping it.

Mike

[Richard Briggs]

No prob, Mike...


Kevin: You said modify FR in sendmail.cf.... and then something about a relay-clients file??

I'm still getting:

NAA07171: Ruleset check_rcpt () rejection: 571 ... we do not relay

I don't see an FR macro in my sendmail.cf or a relay-clients file in /etc/mail.

How do I resolve/bypass/configure Ruleset check_rcpt, or tell the box to relay for one client only?

[Richard Briggs]

[[correction to above "relay-clients" should read "relay-domains" ]]

[Michael Elleby III_1]

Richard, you could use the mailertable feature to accept mail from one location to send to another location.. Typically, it's used for mail from users in different domains, but you can use it for mail within your host domain.

Mike

[Vincent Fleming]

I haven't done this on HPUX recently... but I have just finished configuring another UNIX vers with a recent version of sendmial.

What you need to do is fill in /etc/mail/access on the receiving machine (boxB) to allow relay from boxA.

You can specify either dotted-quad or hostname format (dotted quad is more secure) in the /etc/mail/access file with the term RELAY like this:

10.1.2.1 RELAY

Then you have to make the database from it (a process similar to aliases) with:

makemap hash /etc/mail/access

It should take effect immediately.

Good luck!

[Michael Elleby III_1]

Thanx Vincent, I had forgotten about the access table...

Mike-