Secure relay sendmail.

[Worapoj P.]

Help,

I'm under spam mail from outside by using my host to relay to other sites.
How can I protect/secure mail relay by limit only my domain Or address list as I given. Pls help how to configure?

I using sendmail 8.9.3 PHNE_12XXX I couldn't remember.

Thnks
Worapoj

[Rich Wright]

cd to /usr/newconfig/etc/mail/cf/cf
and run ./gen_cf to create a new sendmail.cf file with the options you want.
Copy that file to /etc/mail/sendmail.cf and restart sendmail.

Rich

[Mark Greene_1]

Read this:

http://www.sendmail.org/tips/relaying.html

and then rebuild your sendmail.cf file with the feature settings you want to limit relaying. You may be running a sendmail.cf built for a prior release than what you are running now.

HTH
mark

[Christopher Caldwell]

In 8.9.3 search for LocalIP and LocalNames in /etc/mail/sendmail.cf.

Make sure the anti-spamming rulesets are uncommented.

Local* are plain text files with one IP address or domain per line. To catch aggregates of IPs [networks], drop an octet off of the address.

e.g.
10.1.1.1 gets 10.1.1.1
10.1.1 gets 10.1.1.0 - 10.1.1.255.

# # file containing IP numbers of machines which can use our relay #
# F{LocalIP} /etc/mail/LocalIP #
# #
# # file containing names of machines which can use our relay #
# F{LocalNames} /etc/mail/LocalNames

[Jeffrey S. Sims]

Probably doesn't need to be said, but since all my other ideas were already stated i will say it anyway.

You may also want to upgrade your version of sendmail if you are not using a newer version already. Since SPAM has picked up at time went on, the never versions give you more tools and options to use for anti-spam.

If you do not know the version of sendmail you are running you can use:
telnet mailserver.domain.com 25 to get that info.

Hope it helps.

[Christopher Caldwell]

If you do upgrade sendmail (which is good advice), the Local* databases get replaced with the access_db.

[U.SivaKumar_2]

Hi,
Use the latest version of sendmail (8.11.1) ..
you can download it from www.software.hp.com.
It has antispam features enabled by default.

regards,
U.SivaKumar

[Bill Thorsteinson]

Consider using exim as a replacement for sendmail.
I find it much easier to configure.