Hello again,

I have just added a second server to my network. This second server is
running Vuurmuur firewall and nothing else, just firewall and router. It's
running slack 12 and sendmail 8.14.1 is installed, but not running. The
problem is, the firewall server will not send any notification messages
(or any messages) to my mail server. I get This error in the maillog...

"lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0), delay=00:00:00,
xdelay=00:00:00, mailer=relay, pri=30238, relay=[127.0.0.1] [127.0.0.1],
dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]"

I've used this basic setup before without any problems, but can't remember
how I set it up. Can anyone me ou?

Thanks,
Rick

Rick Knight <rick_knight@rlknight.com> writes:
> I have just added a second server to my network. This second server is
> running Vuurmuur firewall and nothing else, just firewall and router. It's
> running slack 12 and sendmail 8.14.1 is installed, but not running. The
> problem is, the firewall server will not send any notification messages
> (or any messages) to my mail server. I get This error in the maillog...
>
> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0), delay=00:00:00,
> xdelay=00:00:00, mailer=relay, pri=30238, relay=[127.0.0.1] [127.0.0.1],
> dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]"
>
> I've used this basic setup before without any problems, but can't remember
> how I set it up. Can anyone me ou?

Are you sure sendmail service has been started?
Lack of "auto start" is the first thing to check.

--
[pl>en: Andrew] Andrzej Adam Filip : anfi@priv.onet.pl : anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/

On Sun, 25 Nov 2007 20:01:30 +0100, Andrzej Adam Filip wrote:

> Rick Knight <rick_knight@rlknight.com> writes:
>> I have just added a second server to my network. This second server is
>> running Vuurmuur firewall and nothing else, just firewall and router.
>> It's running slack 12 and sendmail 8.14.1 is installed, but not
>> running. The problem is, the firewall server will not send any
>> notification messages (or any messages) to my mail server. I get This
>> error in the maillog...
>>
>> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0),
>> delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30238,
>> relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
>> refused by [127.0.0.1]"
>>
>> I've used this basic setup before without any problems, but can't
>> remember how I set it up. Can anyone me ou?
>
> Are you sure sendmail service has been started? Lack of "auto start" is
> the first thing to check.
>
>
I've tried that. I get a different error message. Also, since this is not
my main mail server, do I need to run sendmail on it?

Thanks,
Rick

Rick Knight <rick_knight@rlknight.com> writes:

> On Sun, 25 Nov 2007 20:01:30 +0100, Andrzej Adam Filip wrote:
>
>> Rick Knight <rick_knight@rlknight.com> writes:
>>> I have just added a second server to my network. This second server is
>>> running Vuurmuur firewall and nothing else, just firewall and router.
>>> It's running slack 12 and sendmail 8.14.1 is installed, but not
>>> running. The problem is, the firewall server will not send any
>>> notification messages (or any messages) to my mail server. I get This
>>> error in the maillog...
>>>
>>> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0),
>>> delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30238,
>>> relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
>>> refused by [127.0.0.1]"
>>>
>>> I've used this basic setup before without any problems, but can't
>>> remember how I set it up. Can anyone me ou?
>>
>> Are you sure sendmail service has been started? Lack of "auto start" is
>> the first thing to check.
>
> I've tried that. I get a different error message. Also, since this is not
> my main mail server, do I need to run sendmail on it?

Sendmail 8.12+ default installation method requires running local SMTP
server at least at 127.0.0.1:25. It allows to preserve all former
functionality but without requiring "set root id" installation that
always must be tread as potential security risk.
[ http://www.sendmail.org/security/secure-install.php ]

You may generate custom submit.cf (not sendmail.cf) from modified
submit.mc to make sendmail send locally submitted messages to the mail
server on internal network instead of 127.0.0.1:25.
FEATURE(`msp', `[aaa.bbb.ccc.ddd]')

--
[pl>en: Andrew] Andrzej Adam Filip : anfi@priv.onet.pl : anfi@xl.wp.pl
Open-Sendmail: http://open-sendmail.sourceforge.net/

On Sun, 25 Nov 2007 21:42:30 +0100, Andrzej Adam Filip wrote:

> Rick Knight <rick_knight@rlknight.com> writes:
>
>> On Sun, 25 Nov 2007 20:01:30 +0100, Andrzej Adam Filip wrote:
>>
>>> Rick Knight <rick_knight@rlknight.com> writes:
>>>> I have just added a second server to my network. This second server is
>>>> running Vuurmuur firewall and nothing else, just firewall and router.
>>>> It's running slack 12 and sendmail 8.14.1 is installed, but not
>>>> running. The problem is, the firewall server will not send any
>>>> notification messages (or any messages) to my mail server. I get This
>>>> error in the maillog...
>>>>
>>>> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0),
>>>> delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30238,
>>>> relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
>>>> refused by [127.0.0.1]"
>>>>
>>>> I've used this basic setup before without any problems, but can't
>>>> remember how I set it up. Can anyone me ou?
>>>
>>> Are you sure sendmail service has been started? Lack of "auto start" is
>>> the first thing to check.
>>
>> I've tried that. I get a different error message. Also, since this is not
>> my main mail server, do I need to run sendmail on it?
>
> Sendmail 8.12+ default installation method requires running local SMTP
> server at least at 127.0.0.1:25. It allows to preserve all former
> functionality but without requiring "set root id" installation that
> always must be tread as potential security risk.
> [ http://www.sendmail.org/security/secure-install.php ]
>
> You may generate custom submit.cf (not sendmail.cf) from modified
> submit.mc to make sendmail send locally submitted messages to the mail
> server on internal network instead of 127.0.0.1:25.
> FEATURE(`msp', `[aaa.bbb.ccc.ddd]')
>

OK. I've edited my /etc/mail/submit.cf and changed
FEATURE(`msp', `[127.0.0.1]') to
FEATURE(`msp', `[172.16.88.3]') and restarted sendmail. Messages are
being delivered to the local root user, root@knight-fw.rlknight.com, but
not to the user on my mail server root@rlknight.com.

I've had this working in the past but cannot for the life of me remember
how I did it.

Thanks,
Rick

On Sun, 25 Nov 2007 21:42:30 +0100, Andrzej Adam Filip wrote:

> Rick Knight <rick_knight@rlknight.com> writes:
>
>> On Sun, 25 Nov 2007 20:01:30 +0100, Andrzej Adam Filip wrote:
>>
>>> Rick Knight <rick_knight@rlknight.com> writes:
>>>> I have just added a second server to my network. This second server is
>>>> running Vuurmuur firewall and nothing else, just firewall and router.
>>>> It's running slack 12 and sendmail 8.14.1 is installed, but not
>>>> running. The problem is, the firewall server will not send any
>>>> notification messages (or any messages) to my mail server. I get This
>>>> error in the maillog...
>>>>
>>>> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0),
>>>> delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30238,
>>>> relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
>>>> refused by [127.0.0.1]"
>>>>
>>>> I've used this basic setup before without any problems, but can't
>>>> remember how I set it up. Can anyone me ou?
>>>
>>> Are you sure sendmail service has been started? Lack of "auto start" is
>>> the first thing to check.
>>
>> I've tried that. I get a different error message. Also, since this is not
>> my main mail server, do I need to run sendmail on it?
>
> Sendmail 8.12+ default installation method requires running local SMTP
> server at least at 127.0.0.1:25. It allows to preserve all former
> functionality but without requiring "set root id" installation that
> always must be tread as potential security risk.
> [ http://www.sendmail.org/security/secure-install.php ]
>
> You may generate custom submit.cf (not sendmail.cf) from modified
> submit.mc to make sendmail send locally submitted messages to the mail
> server on internal network instead of 127.0.0.1:25.
> FEATURE(`msp', `[aaa.bbb.ccc.ddd]')
>

I've also added...

define(`SMART_HOST',`mail.mydomain.com')dnl

to the sendmail.mc file and rebuilt that. Mail still wants to go to a
local user and not to my mail server users.

Thanks,
Rick

In article <rEk2j.911$Vq.445@nlpi061.nbdc.sbc.com>,
Rick Knight <rick_knight@rlknight.com> wrote:
>On Sun, 25 Nov 2007 20:01:30 +0100, Andrzej Adam Filip wrote:
>
>> Rick Knight <rick_knight@rlknight.com> writes:
>>> I have just added a second server to my network. This second server is
>>> running Vuurmuur firewall and nothing else, just firewall and router.
>>> It's running slack 12 and sendmail 8.14.1 is installed, but not
>>> running. The problem is, the firewall server will not send any
>>> notification messages (or any messages) to my mail server. I get This
>>> error in the maillog...
>>>
>>> "lAPLOWEk007711: to=root@rlknight.com, ctladdr=root (0/0),
>>> delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30238,
>>> relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection
>>> refused by [127.0.0.1]"
>>>
>>> I've used this basic setup before without any problems, but can't
>>> remember how I set it up. Can anyone me ou?
>>
>> Are you sure sendmail service has been started? Lack of "auto start" is
>> the first thing to check.
>>
>>
>I've tried that. I get a different error message. Also, since this is not
>my main mail server, do I need to run sendmail on it?

Yes, as the firewall is configured, you need an instance of sendmail running.
It needs -only- to be listening on 127.0.0.1 though.

It _might_ be possible to tell the firewall to use a different mailhost,
but that would be a question for a group that knows that firewall, not
here.