Index: [Article Count Order] [Thread]

Date:  Tue, 3 Jun 2008 22:16:27 -0700 (PDT)
From:  Dan Kriwitsky <webhosting (at mark) yahoo.com>
Subject:  [coba-e:13149] Re: Another Strange Sendmail Error
To:  coba-e (at mark) bluequartz.org
Message-Id:  <322354.69570.qm (at mark) web65605.mail.ac4.yahoo.com>
In-Reply-To:  <014b01c8c51c$750afe30$0569a8c0@WORK1>
X-Mail-Count: 13149


--- Jim Scott <jscott (at mark) infoconex.com> wrote:

> 
> 
> 
> > Sendmail seems to be intermittently ignoring sendmail access.
> >
> > Return-Path: <hanspete (at mark) ashi.com>
> > Received: from uslec-71.16.32.212.cust.uslec.net
> > (uslec-71.16.32.212.cust.uslec.net [71.16.32.212] (may be forged))
> > by server (8.13.1/8.13.1) with ESMTP id m52E5nY5030176
> > for <name (at mark) example.com>; Mon, 2 Jun 2008 09:05:52 -0500
> >
> 
> Da, the above seems to be pasted from the contents of the email header.
> Can 
> you send me privately a full email header. You sure this is the server
> that 
> connected to your machine or possibly one of the upstream  servers and
> not 
> the final machine?

I do know how to read headers. "by server" above is my machine, so it's the
connection to my server. There were no other upstream servers in the
headers.

> 
> Also you are correct I just reviewed sendmail docs and you do not have to
> 
> put the dot in front. My guess without seeing full headers is you are 
> assuming maybe that it is not being blocked but maybe the header is not 
> properly reflecting the last machine that was talking to your server. Any
> 
> chance you can send a email header and associated sendmail log showing
> that 
> it was accepted?

From maillog.1.gz

Jun  2 09:05:53 admin sendmail[30176]: m52E5nY5030176:
from=<hanspete (at mark) ashi.com>, size=9650, class=0, nrcpts=1,
msgid=<07112649.20080602140543 (at mark) myserver.com>, proto=ESMTP, daemon=MTA,
relay=uslec-71.16.32.212.cust.uslec.net [71.16.32.212] (may be forged)

I'm wondering if it has something to do with the last Yum update. I recall
someone saying it replaced sendmail.cf? Which is strange because my
sendmail.cf says "built by root (at mark) [my.server].net on Wed Apr 2 13:07:22 CDT
2008"

My sendmail.cf also shows my sendmail.mc changes for spamhaus checking and
despite restarting sendmail, that is also not functioning. Is there another
sendmail on the server now since the last update?

[root@admin log]# ps waux | grep sendmail
root      5584  0.0  0.0  5136  640 pts/0    S+   23:48   0:00 grep
sendmail
root     20692  0.0  0.1  8896 2684 ?        Ss   Jun02   0:00 sendmail:
accepting connections
smmsp    20703  0.0  0.0  8332 1628 ?        Ss   Jun02   0:00 sendmail:
Queue runner@00:15:00 for /var/spool/clientmqueue


-- 
Dan Kriwitsky