Hi!

How do I configure sendmail so that it will relay certain addresses to
the mailer given in the mailertable and reject all other addresses?

My primary MX is not the machine on which I ready mail. Sendmail is
supposed to relay my mails to another machine which does the local
delivery. I tried this:

/etc/mail/mailertable:
MyDomain.de smtp:[address of my local mail-system]

/etc/mail/access:
To:foo@MyDomain.de RELAY
To:MyDomain.de error:5.7.0:550 user unknown

This is what I wanted to achieve: Mails to foo@MyDomain.de sould be
relayed to my local mailserver. All other mail should be rejected
(whitelisting).

I can't get this working. In the configuration above, all attempts to
send a mail to foo@MyDomain.de result in "Relaying Denied".

What makes me wonder is that the other way round (blacklisting, which is
not what I want to have) works as expected:

/etc/mail/access:
To:bogus@MyDomain.de error:5.7.0:550 user unknown
To:MyDomain.de RELAY

What can I do?

Thanks in advance!

Regards,
T.

On Sat, 16 Sep 2006 10:00:49 +0200 T. Valen wrote:

> How do I configure sendmail so that it will relay certain addresses to
> the mailer given in the mailertable and reject all other addresses?
>
> My primary MX is not the machine on which I ready mail. Sendmail is
> supposed to relay my mails to another machine which does the local
> delivery. I tried this:
>
> /etc/mail/mailertable:
> MyDomain.de smtp:[address of my local mail-system]
>
> /etc/mail/access:
> To:foo@MyDomain.de RELAY
> To:MyDomain.de error:5.7.0:550 user unknown
>
> This is what I wanted to achieve: Mails to foo@MyDomain.de sould be
> relayed to my local mailserver. All other mail should be rejected
> (whitelisting).

Above settings should work just fine.

> I can't get this working. In the configuration above, all attempts to
> send a mail to foo@MyDomain.de result in "Relaying Denied".

How is your access_db called from sendmail.mc? Omit an "-o" parameter if
existing to see if there is a problem with the access_db, to be seen when
the Sendmail daemon restarts.

> What makes me wonder is that the other way round (blacklisting, which is
> not what I want to have) works as expected:
>
> /etc/mail/access:
> To:bogus@MyDomain.de error:5.7.0:550 user unknown
> To:MyDomain.de RELAY

That configuration scheme relays all mail for MyDomain.de, except for
those addresses where you defined an error DSN for? If it works you then
have MyDomain.de not placed into class{w}, which is good and required.

> What can I do?

Post your sendmail.mc without comment lines. Which OS / release do you
run?

> Regards,
> T.

Alexander


--
Alexander Dalloz | Löhne, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.35_FC2smp
Serendipity 15:01:31 up 9 days, 17:11, load average: 0.44, 0.38, 0.31

In article <pan.2006.09.16.13.12.30.987881@arcor.de> Alexander Dalloz
<adalloz@arcor.de> writes:
>On Sat, 16 Sep 2006 10:00:49 +0200 T. Valen wrote:
>
>>
>> /etc/mail/mailertable:
>> MyDomain.de smtp:[address of my local mail-system]
>>
>> /etc/mail/access:
>> To:foo@MyDomain.de RELAY
>> To:MyDomain.de error:5.7.0:550 user unknown
>>
>> This is what I wanted to achieve: Mails to foo@MyDomain.de sould be
>> relayed to my local mailserver. All other mail should be rejected
>> (whitelisting).
>
>Above settings should work just fine.

No, user@domain entries are not checked for RELAY unless you use the
undocumented

define(`_RELAY_FULL_ADDR_', 1)

setting.

--Per Hedeland
per@hedeland.org

In article <pan.2006.09.16.13.12.30.987881@arcor.de> Alexander Dalloz
<adalloz@arcor.de> writes:
>On Sat, 16 Sep 2006 10:00:49 +0200 T. Valen wrote:
>
>>
>> /etc/mail/mailertable:
>> MyDomain.de smtp:[address of my local mail-system]
>>
>> /etc/mail/access:
>> To:foo@MyDomain.de RELAY
>> To:MyDomain.de error:5.7.0:550 user unknown
>>
>> This is what I wanted to achieve: Mails to foo@MyDomain.de sould be
>> relayed to my local mailserver. All other mail should be rejected
>> (whitelisting).
>
>Above settings should work just fine.

No, user@domain entries are not checked for RELAY unless you use the
undocumented

define(`_RELAY_FULL_ADDR_', 1)

setting.

--Per Hedeland
per@hedeland.org

Per,

thank you so much! Now it finally works the way I want! Great!

T.

>>> /etc/mail/mailertable:
>>> MyDomain.de smtp:[address of my local mail-system]

>>> /etc/mail/access:
>>> To:foo@MyDomain.de RELAY
>>> To:MyDomain.de error:5.7.0:550 user unknown

>>> This is what I wanted to achieve: Mails to foo@MyDomain.de sould be
>>> relayed to my local mailserver. All other mail should be rejected
>>> (whitelisting).

>> Above settings should work just fine.

> No, user@domain entries are not checked for RELAY unless you use the
> undocumented
> define(`_RELAY_FULL_ADDR_', 1)
> setting.