Sendmail & MailScanner - can't connect from public addresses

[Stephen Swaney]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of James D. Parra
> Sent: Friday, March 12, 2004 7:02 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Sendmail & MailScanner - can't connect from public addresses
>
> Hello,
>
> Finished setting up the latest MailScanner and Sendmail, however, although
> I
> can connect to the mail server via telnet to port 25 from any machine on
> the
> local subnet, it does not respond from any request from public IP
> addresses.
> There is no firewall on this server, but it is behind a firewall. Nmap
> shows
> port 25 as open.  When I open port forwarding from two other firewalls
> (from
> different ISP address ranges) to the mail server, I get no response when
> telnetting from the public side to the smtp port. (It is not the firewall
> since port forwarding works to the other mail servers)
>
> It appears that either Sendmail or MailScanner is only accepting
> connections
> from the local subnet.

In your sendmail.mc file you should probably comment out - add a "dnl" in
front of the line - that starts with DAEMON_OPTIONS. This line causes
sendmail only to accept connections from the localhost. A correct example
from the sendmail.mc file is below:

dnl # The following causes sendmail to only listen on the IPv4 loopback
address
dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
dnl # address restriction to accept email from the internet or intranet.
dnl #
dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Then rebuild your sendmail.cf with the m4 macro.

Steve
Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com

> Any ideas on how to fix this?
>
> This may be useful;
> grep "inet" /etc/mail/sendmail.cf
> #O ClientPortOptions=Family=inet, Address=0.0.0.0
>
> Many thanks in advance,
>
> James
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> Fortress Systems Ltd.
> www.fsl.com
>



--
This message has been scanned for viruses and
dangerous content by Fortress Secure Mail Gateway
and was found to be clean.

Fortress Systems Ltd. - http://www.fsl.com