RE: Sendmail not able to send to external addresses.

From: Cowles, Steve (steve_at_stevecowles.com)
Date: 08/01/03

  • Next message: James Gibbon: "gthumb / 'gconf error'" 
    To: "'redhat-list@redhat.com'" <redhat-list@redhat.com>
Date: Thu, 31 Jul 2003 17:47:55 -0500

    Cleveland@mail.winnefox.org wrote:
    >> In the following order...
    >>
    >> 1) type: telnet 4clevands.com 25
    >> This should verify that a firewall is not blocking attempts
    >> from the server your on. If you get a 220 response, then type: quit.
    > I get:
    > Trying 69.57.150.26...
    > And it just sits there.

    That's not good!

    1) Are you sure there is not a firewall blocking your outbound connections?

    2) Are you sure this system is not starting a firewall script of somekind?

    3) Can you telnet to other MTA's on the internet?

    >
    >> 2) type: sendmail -bt -d0.1 </dev/null
    >> Look for the canonical name. Can this name be looked up in
    >> DNS? both forward and reverse?
    > I get this:

    [snip]

    > ============ SYSTEM IDENTITY (after readcf) ============
    > (short domain name) $w = winlit
    > (canonical domain name) $j = winlit.org
    > (subdomain name) $m = org
    > (node name) $k = mystique.winnefox.org
    > ========================================================

    > Now, the machine name is mystique. One of the domains I have hosted on
    > that machine is winlit.org. Shouldn't the canonical domain name have
    > something to do with mystique?

    The machine name (as you call it) can be one name. How sendmail announces
    itself can be another. That will be the canonical name. In addition to the
    telnet problems you are having above, you need to fix the above canonical
    name problem with sendmail. Based on the above output, it looks like you
    have improperly configured your systems hostname/domainname and possibly
    resolver libs. Unless overridden in the sendmail.mc file, sendmail will
    derive the above at startup.

    Using your comments to date, the above sendmail output should look something
    like:
     ============ SYSTEM IDENTITY (after readcf) ============
           (short domain name) $w = mystique
       (canonical domain name) $j = mystique.winlit.org
              (subdomain name) $m = winlit.org
                   (node name) $k = mystique
     ========================================================

    > Also, I don't have mystique.winnefox.org
    > registered with dns, should it be?

    If your going to be sending e-mail with this system, you should register its
    canonical name.

    >
    >> 3) You did not answer my question from my other post. Are we
    >> working on the same problem? The logfile entry you posted is
    >> over a day old. Whats the output of "mailq"
    >
    > Yeah, same problem. I must have just grabbed one that had been trying
    > for a while. Here's output from the bottom of mailq:

    Are there any e-mails that can be delivered using this system -or- are all
    of them being queued because of connection timeout? 

    -- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: James Gibbon: "gthumb / 'gconf error'"

    Relevant Pages

    • Sendmail ignores hosts.allow
      ... I'm trying to restrict access to sendmail via hosts.allow. ... a firewall, since I just want to block everyone but the localhost from ... localhost, but from all remote locations as well. ... connecting and sending e-mail. ...
      (freebsd-questions)
    • Re: How do I block just one port from being listened to on my server
      ... Well I looked through ALL my logs; ... Well I'll be testing that Firewall out that you gave the link to. ... I just don't want it blocking everything by ... Blocking one port isn't the answer. ...
      (microsoft.public.security)
    • RE: [Full-Disclosure] Sidewinder G2
      ... Secure Computing Sidewinder G2 Firewall Stops New High-Profile Sendmail ... Technology Prevents Sendmail Attack Warned About in CERT Advisory ...
      (Full-Disclosure)
    • Re: [Full-Disclosure] Sidewinder G2
      ... > The Sidewinder G2 Firewall, ... > mail message containing this attack is processed on the Sidewinder G2 ... > internal Sendmail servers. ...
      (Full-Disclosure)
    • Re: Blocking Yahoo Messenger With Firewall??
      ... >wanting to sell a subscription service to go with the firewall. ... blocking unneeded access to sites (using a proxy ... server can help here), ... everything - try connecting to any computer in your company on port 70 ...
      (alt.computer.security)