Hello,

I am running ESMTP Sendmail 8.12.11/8.12.11 and keep getting a lot of
bounced back emails from other domains that I am not sending emails to.
I have found out that my server is being used as a relay but I can not
find any information on how to disable relaying except for my local
domains. I was told by upgrading my sendmail version that this would be
disabled by default, but it didn't work. Can someone please tell me
what configuration settings I need to change in my mc or cf files?
Below are my config settings:


MC file:
------------------------------------------------------------------------------
divert(0)
VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.mc,v 1.10.2.19 2003/12/31
17:42:16 gshapiro Exp $')
OSTYPE(freebsd4)
DOMAIN(generic)

FEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access')
FEATURE(blacklist_recipients)
FEATURE(local_lmtp)
FEATURE(mailertable, `hash -o /etc/mail/mailertable')
FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')

dnl Uncomment to allow relaying based on your MX records.
dnl NOTE: This can allow sites to use your server as a backup MX
without
dnl your permission.
dnl FEATURE(relay_based_on_MX)

dnl DNS based black hole lists
dnl --------------------------------
dnl DNS based black hole lists come and go on a regular basis
dnl so this file will not serve as a database of the available servers.

dnl For that, visit
dnl
http://directory.google.com/Top/Comp...am/Blacklists/

dnl Uncomment to activate Realtime Blackhole List
dnl information available at http://www.mail-abuse.com/
dnl NOTE: This is a subscription service as of July 31, 2001
dnl FEATURE(dnsbl)
dnl Alternatively, you can provide your own server and rejection
message:
dnl FEATURE(dnsbl, `blackholes.mail-abuse.org', `"550 Mail from "
$&{client_addr} " rejected, see http://mail-abuse.org/cgi-bin/loo$

dnl Dialup users should uncomment and define this appropriately
dnl define(`SMART_HOST', `your.isp.mail.server')

dnl Uncomment the first line to change the location of the default

dnl /etc/mail/local-host-names and comment out the second line.

dnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw')
define(`confCW_FILE', `-o /etc/mail/local-host-names')

dnl Enable for both IPv4 and IPv6 (optional)
DAEMON_OPTIONS(`Name=IPv4, Family=inet')
DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')

define(`confBIND_OPTS', `WorkAroundBrokenAAAA')
define(`confNO_RCPT_ACTION', `add-to-undisclosed')
define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')
MAILER(local)

MAILER(smtp)

CF file is a little long. Let me know if you need it.

Thank you,
Bill Van Pelt

In article <1169219208.711032.48480@51g2000cwl.googlegroups.c om>
linusx@gmail.com writes:
>
> I am running ESMTP Sendmail 8.12.11/8.12.11 and keep getting a lot of
>bounced back emails from other domains that I am not sending emails to.
>I have found out that my server is being used as a relay but I can not
>find any information on how to disable relaying except for my local
>domains. I was told by upgrading my sendmail version that this would be
>disabled by default, but it didn't work. Can someone please tell me
>what configuration settings I need to change in my mc or cf files?

Sendmail has disabled relaying by default since version 8.9.0 IIRC.
There are ways to enable it, selectively or completely - most users need
the selectively part, almost no-one needs the completely part, and that
one requires active intent to enable. Hence trying to find out how to
disable relaying in sendmail isn't going to get you very far. Anyway
nothing in your .mc file indicates that you have accidentally enabled
the completely part - in fact it's mostly comments, no need to post the
lines that start with 'dnl'.

Most likely your server isn't actually being used as a relay at all, and
the bounces are due to spammers faking sender addresses in your domain,
without the messages actually passing through your box. But there are
some cases where e.g. web services on your box can trick sendmail into
not relaying, but sending out mail that is locally-generated from
sendmail's perspective.

For any actual diagnosis, we need to see the log lines (both 'from=' and
'to=') for messages that you think have been relayed by sendmail.

--Per Hedeland
per@hedeland.org

Per Hedeland wrote:
> In article <1169219208.711032.48480@51g2000cwl.googlegroups.c om>
> linusx@gmail.com writes:

>
> For any actual diagnosis, we need to see the log lines (both 'from=' and
> 'to=') for messages that you think have been relayed by sendmail.

Possibly also access db

Per Hedeland wrote:
> In article <1169219208.711032.48480@51g2000cwl.googlegroups.c om>
> linusx@gmail.com writes:

>
> For any actual diagnosis, we need to see the log lines (both 'from=' and
> 'to=') for messages that you think have been relayed by sendmail.

Possibly also access db

jmaimon@ttec.com wrote:
> Per Hedeland wrote:
> > In article <1169219208.711032.48480@51g2000cwl.googlegroups.c om>
> > linusx@gmail.com writes:
>
> >
> > For any actual diagnosis, we need to see the log lines (both 'from=' and
> > 'to=') for messages that you think have been relayed by sendmail.
>
> Possibly also access db

Thanks, I also thought that maybe they were just faking headers, as I
don't see much of anything in the log file indicating other wise. Thank
you for the .

Bill Van Pelt