Sendmail feature

[Kafsat Taiyus]

Hi,

I am trying to add FEATURE(relay_hosts_only)in our sendmail ( Tru64 5.1B, sendmail version 8.11.1) configuration file.

I have added the line to hostname.m4 file
run make -f Makefile.cf.beta
Restart the service
But getting error "sendmail.cf: line 24: fileclass: cannot open 'ATURE(relay_hosts_only)': No such file or directory"

In error it says "ATURE" actually in the configuration file it is "FEATURE" not "ATURE".

Plese point me to the correct direction.


Regards
Kafsat

[Ralf Puchner]

Relaying (messages from a host outside your domain to a host outside your domain) is turned off by default in sendmail >= 8.9 if you have built the configuration file with the M4 macros in the cf/ subdirectory of the kit.

Documentation for the various relaying options is in cf/README. See especially the documentation for the features promiscuous_relay, relay_entire_domain, relay_hosts_only, relay_based_on_MX, and
relay_local_from, among others.

The m4 is only a file to create the configuration via makefile, so if you edit the sendmail.cf with the correct keywords directly it should work. If the keyword is not recognized it is not compiled into the binary or syntax is wrong.

[Ralf Puchner]

Update:
m4 is not supported with version shipped by Tru64, only the IAS kit supports this feature.

[Kafsat Taiyus]

Thank you Ralf for your reply.

We have configured our Unix server to forward all the mails to a Micorsoft Exchage server. The Exchange server is configured to relay message received only from the IP address of the Unix server.

But the problem is we can telnet to the Unix server on port 25 and send email to any address with any address in MAIL FROM: field. We want to stop it.

I was trying to uses M4 features to stop this problem. If I can't use FEATURES What would be a good way to do it?

We are not licensed for Internet Express.

Thank you again for your help.

Regards
Kafsat

[Ralf Puchner]

There is an old howto for spam relay blocking, but I'm not sure if it will work with newer versions of sendmail (howto was for 4.0a):

In this example, we will assume the current mail domain is abc.com, and we also
want to recieve mail for domain xyz.com. (note: there must be mx records that
point you to this mail server for both the abc.com and xyz.com domains)

Step 1) populate the sendmail.cw file with the domains which you will be accepting mail for

Step 2) apply the Anti-Spamming kit from the CSC (should be now compiled within newer sendmail versions)

Step 3) locate the two lines in the file sendmail.cf as below

# still something left?
R$*<@$+>$* $#error $@ 5.7.1 $: 550 we do not relay

and change it by adding in the line..

# still something left?
R$*<@xyz.com>$* $@ ok
R$*<@$+>$* $#error $@ 5.7.1 $: 550 we do not relay

(note: you would obviously put in 'your domain' in the place of xyz.com)

Step 4) restart the sendmail daemon and test.

please let me know if it will work.

[Kafsat Taiyus]

Ralf,

The sendmail.cf file we have, which is created using mailsetup utility do not have lines
# still something left?
R$*<@$+>$* $#error $@ 5.7.1 $: 550 we do not relay

I have added lines
still something left?
R$*<@xyz.com>$* $@ ok
R$*<@$+>$* $#error $@ 5.7.1 $: 550 we do not relay

In rule set for nonlocal mails. Now it is stopping all the mails saying "we do not relay" looks like we need to allow some destination domain for the mails to to. I dont know how to do that. Please let me know if you know how to do that.

Thank you for your help.

Regards
Kafsat

[Kafsat Taiyus]

Ralf,

I loged a call with HP and HP told me that the sendmail kit shipped with Tru64 are configured as open relay, and they provided me with a Nospamkit after applying the kit it stopped relaying. That solved my problem.

Thank you again for your help.

Regards
Kafsat

[Al Licause]

We distribute a nospam.tar.gz kit from the customer support center that was originally built for v4.0d and older systems running v5.X sendmail.

It contains a v8.8.7 sendmail image along with a script to add no spam rules to an existing sendmail.cf file. The script still works well with the latest v8.12.10 sendmail in the Internet Express kit.

The file should be available on xfer.support.compaq.com:/to_customer. You'll need to login using anonymous access from a shell prompt.