sendmail 550 Relaying is Prohibited

[Steve_3]

Here is the situation. I am able to use sendmail to mail to Local User, Remote User (within the company joe@mycompany.com through exchange server) but not to say jane@hotmail.com or jane @yahoo.com. Is this a relaying issue on the exhange side? or hp side?
I am using sendmail 8.8.6

thx
steve

[Kofi ARTHIABAH]

The relay prohibited is probably from the NT box since it is the one doing the relay on behalf of the hp box. to verify this, try the following tests:

telnet hpbox 25
helo hpbox.mydomain.com
mail from:
rcpt to:
(if you get a relay prohibited at this point then it is from the HP box, in which case you have to edit the /etc/mail/relay_allow and /etc/mail/ip_allow to include the IP addresses of the hosts that are using the HP box as the relay)

try the same with then once you determine where it is being prohibitted, you can fix it there.

cheers.

[Steve_3]

Can you have more than one DS specified?

What I see is currently DS is set the mailserver ( exchange). so when you do sendmail to say joe@mycompany.com, it check DS if joe@mycompany.com is there in the exchange server and when you send a different domain like joe@hotmail.com it will not know where to go. Do we need a mail gateway set to DS?

thx,
steve

[Steve_3]

Kofi,

I tried what you told me.
Here is what i get . when i put in
mail from me@mydomain.com..Sender OK
rcpt to: joe@yahoo.com...WE DO NOT RELAY

steve

[Dave Kelly_1]

I have seen this problem before with the anti-relaying rules in sendmail.

It can happen if you telnet to localhost, i.e.

telnet localhost 25

You need to create a file called /etc/mail/LocalIP and add 127.0.0.1 to it.

In /etc/mail/sendmail.cf, uncomment the line:

#F{LocalIP} /etc/mail/LocalIP


Then stop and restart sendmail.

[Mike Gordon]

Check also your exchange configuration. An option exists to prevent the forwarding of SMTP mail over the internet.

I think this is configured on the 'internet connector' but am unable to check at the moment.

Mike

[Kofi ARTHIABAH]

Steve:

There is a text file on your server that describes the Anti-relaying features of sendmail. you can find it : /usr/share/doc/sendmail8-8_delta.txt - the first section of that documents describes how to fix your problem.

Additionally, you had asked if it was possible to have more than one DS. I believe the answer is no, however, if your machine is connected to the internet, you can get it to deliver mail directly if your /etc/nsswitch.conf and /etc/resolv.conf are properly set up.

the DS variable is used only when the server cannot contact the required domain's mx records directly. If however, it can, it attempts to deliver the mail directly.

Check that /etc/nsswitch.conf contains the line:

hosts: files [NOTFOUND=continue] dns

and that your /etc/resolv.conf contains the nameservers that you use to resolve names.

Good luck.