1. Forum
  2. Usenet
  3. COMP.MAIL.SENDMAIL

  • oder of validity check

    From Ralph Spitzner@21:1/5 to All on Sun Aug 29 20:08:07 2021
    is there a way to change the order in which sendmail checks incoming messages ? reason for asking is:
    I see an incoming mail from something@blah.work for a user that doesn't exist, .work is set to deny in access, the user
    is not valid,but sendmail rejects it temp with
    reject=451 4.1.8 Possibly forged hostname for (ip)
    so they just keep trying until it gets to a 551.....


    regards
    -rasp

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Ralph Spitzner on Sun Aug 29 16:29:07 2021
    Ralph Spitzner wrote:
    is there a way to change the order in which sendmail checks incoming messages ?

    Sure, it's all in rule(set)s.

    I see an incoming mail from something@blah.work for a user that doesn't exist, .work
    is set to deny in access, the user

    "set" how?

    is not valid,but sendmail rejects it temp with
    reject=451 4.1.8 Possibly forged hostname for (ip)

    The default rules do not use a "Possibly forged hostname"
    so a ".work" entry does not apply to {client_name}.

    Please provide the actual access map entries that should apply and
    let us know whether you use FEATURE(delay_checks)


    --
    Note: please read the netiquette before posting. I will almost never
    reply to top-postings which include a full copy of the previous
    article(s) at the end because it's annoying, shows that the poster
    is too lazy to trim his article, and it's wasting the time of all readers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ralph Spitzner@21:1/5 to All on Mon Aug 30 09:35:03 2021
    Claus Aßmann wrote on 8/29/21 10:29 PM:
    [...]

    is set to deny in access, the user

    "set" how?

    blocked tld's contains

    work REJECT

    let us know whether you use FEATURE(delay_checks)


    FEATURE(delay_checks) is not set in my m4.

    still, the final recipient $user@spitzner.org does not exist...

    regards
    -rasp

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Ralph Spitzner on Mon Aug 30 04:43:01 2021
    Ralph Spitzner wrote:

    work REJECT

    Please use "tagged" entries as explained in cf/README:
    From:cyberspammer.com REJECT
    Connect:cyberspammer.com REJECT

    FEATURE(delay_checks) is not set in my m4.

    Give it a try (check the docs first).

    still, the final recipient $user@spitzner.org does not exist...

    I guess you rely on the internal checks for that?
    If so, that's done "too late" for your purpose.
    You could add some rules to explicitly check the recipient address
    (or maybe use virtusertable? again: see cf/README) - together with FEATURE(delay_checks) that most likely has the behaviour you want
    to see.


    --
    Note: please read the netiquette before posting. I will almost never
    reply to top-postings which include a full copy of the previous
    article(s) at the end because it's annoying, shows that the poster
    is too lazy to trim his article, and it's wasting the time of all readers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ralph Spitzner@21:1/5 to All on Mon Aug 30 16:33:06 2021
    Claus Aßmann wrote on 8/30/21 10:43 AM:
    ok, changed that I'll watch the log :-)

    thanks
    -rasp

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From dl8fbh@dl8fbh.ampr.org@21:1/5 to Ralph Spitzner on Tue Aug 31 10:06:54 2021
    Ralph Spitzner <rasp@spitzner.org> wrote:

    is there a way to change the order in which sendmail checks incoming messages ?
    reason for asking is:
    I see an incoming mail from something@blah.work for a user that doesn't exist, .work is set to deny in access, the user
    is not valid,but sendmail rejects it temp with
    reject=451 4.1.8 Possibly forged hostname for (ip)
    so they just keep trying until it gets to a 551.....


    Why don't you use a milter, eg. mailfromd?
    You can do much more and a lot easier.

    Mike

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ralph Spitzner@21:1/5 to dl8fbh@dl8fbh.ampr.org on Wed Sep 1 09:01:21 2021
    dl8fbh@dl8fbh.ampr.org wrote on 8/31/21 12:06 PM:
    [...]
    Why don't you use a milter, eg. mailfromd?
    You can do much more and a lot easier.

    Mike


    since only a few usernames are affected I opted fore somethingelse I've noticed reading the doc for the n'th time:
    localusername@ ERROR:550

    in access.....

    -rasp

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)