Date: Thu, 17 Apr 2003 12:30:52 -0500 From: Kirk Strauser <kirk@strauser.com> To: freebsd-questions@freebsd.org Subject: Sendmail isn't using SMART_HOST. Now what? Message-ID: <87brz5c9pv.fsf@pooh.honeypot.net>
next in thread | raw e-mail | index | archive | help
--=-=-=
Content-Transfer-Encoding: quoted-printable
I have a firewall machine that I don't want to communicate directly with the
outside world, so I've been trying to get it to use another FreeBSD server
on the LAN as it's smart host. The Sendmail config on the machine is
default except for the SMART_HOST setting:
diff -u freebsd.mc gopher.honeypot.net.mc
--- freebsd.mc Sun Dec 29 11:16:44 2002
+++ gopher.honeypot.net.mc Thu Apr 17 12:17:55 2003
@@ -74,7 +74,7 @@
dnl FEATURE(dnsbl, `blackholes.mail-abuse.org', `"550 Mail from " $&{c=
lient_addr} " rejected, see http://mail-abuse.org/cgi-bin/lookup?" $&{clien=
t_addr}')
dnl Dialup users should uncomment and define this appropriately
-dnl define(`SMART_HOST', `your.isp.mail.server')
+define(`SMART_HOST', `kanga.honeypot.net')
dnl Uncomment the first line to change the location of the default
dnl /etc/mail/local-host-names and comment out the second line.
However, after a `make; make install; make restart', I can run tcpdump on
the smart host and watch as the firewall does a DNS query for the domain of
an outgoing email, and then nothing; the firewall is still sending email
directly to the remote machine.
On a related note, the firewall insists on delivering mail locally that it
has no business handling. I have `root' set as an alias to
`root@kanga.honeypot.net' (i.e., on the smart host). Whenever I type
echo test | mail root@kanga.honeypot.net
I get this in my /var/log/messages:
Apr 17 12:26:25 gopher sm-mta[1812]: h3HHQOU1001811: SYSERR(root): MX l=
ist for honeypot.net. points back to gopher.honeypot.net
Apr 17 12:26:25 gopher sm-mta[1812]: h3HHQPU1001812: Losing ./qfh3HHQPU=
1001812: savemail panic
I've read the Sendmail FAQ, but the destination machine *is* configured
correctly. Every other machine I've tested can deliver to that email
address except the machine in question. In fact, a tcpdump doesn't even
show any packets from the firewall to the smart host.
I'm at a loss. This really shouldn't be as difficult as I seem to be making
it. Any suggestions? Am I overlooking something obvious?
=2D-=20
Kirk Strauser
--=-=-=
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQA+nuTM5sRg+Y0CpvERAkiAAJ4/dqU7BIX75LcgPDm9IJ1sf6hBqgCeLatZ
PTkBS8S2ccp41Wp8BsksKtE=
=HM0I
-----END PGP SIGNATURE-----
--=-=-=--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?87brz5c9pv.fsf>