Re: how do I see security logs without turning on sendmail?
- From: Lane <lane@xxxxxxxxxxxxxx>
- Date: Wed, 13 Dec 2006 14:47:27 -0600
On Wednesday 13 December 2006 14:31, Tuareg wrote:
On 12/13/06, Lane <lane@xxxxxxxxxxxxxx> wrote:Tuareg,
Tuareg,
What happens when you do this:
telnet localhost
telnet localhost 25
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Operation timed out
telnet: Unable to connect to remote host
Does the connection time out? Or do you get a sendmail prompt?
Yes, the connection time out.
No, I don't get the sendmail prompt, because there is no sendmail running.
ps axwww | grep sendmail
47237 p0 R+ 0:00.00 grep sendmail
I'm sort of mixed up on the order of the posts, here. But let me see if I
can
rephrase the problem .... and then possibly help you find a solution ...
It seems to me that the problem is that you cannot determine how to make
FreeBSD 6.x do like other hosts under your influence, so that it will
send email from root@localhost to another (possibly a hub) server? Is
that correct?
Yes, we have older versions of FreeBSD (4.x and 5.x) running on remote
servers
where we can't interrupt the service, in this servers, we can send e-mails
to our
main e-mail server, were we get reports of scripts.
In those servers, we don't have running sendmail, look:
ps axwww | grep sendmail
19702 p0 D+ 0:00.00 grep sendmail
%
%telnet localhost 25
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Permission denied
telnet: Unable to connect to remote host
But, we are able to send emails:
mail -v user@xxxxxxxxxxxxxxx
Subject: Test
Testing from FreeBSD 4.6-RELEASE
.
EOT
user@xxxxxxxxxxxxxxxxxx Connecting to main.server.com via esmtp...
220 main.server.com ESMTP
EHLO server.FreeBSD.4.6-RELEASE
250-main.server.com Hello
250-8BITMIME
250-SIZE 31457280
250-ETRN
250-DSN
250 PIPELINING
MAIL From:<user@xxxxxxxxxxxxxxxxxxxxxxxxxx> SIZE=78
250 Sender OK
RCPT To:<user@xxxxxxxxxxxxxxx>
250 Recipient OK
DATA
354 Enter your message, followed by a dot on a line by itself
.
250 AYQ81844 Message accepted for delivery
user@xxxxxxxxxxxxxxxxxx Sent (AYQ81844 Message accepted for delivery)
Closing connection to main.server.com
QUIT
221 main.server.com Goodbye
First I assume that these other FreeBSD installations are also using
sendmail.
If that is NOT correct then your best hope is to replicate your mta
configuration from those other hosts. In fact that might not be a bad
idea
regardless of what they are running :)
You are right, all this installations are also using sendmail.
But again, assuming you want to run sendmail and ONLY allow the localhost
to
transmit out to another host for collection and/or distribution, enter
this
value into /etc/rc.conf:
sendmail_enable="NO"
Now edit /etc/mail/freebsd.mc. Locate the term "SMART_HOST," uncomment
that
line, and enter the IP address or fully qualified domain name of your
upstream server in place of 'your.isp.mail.server'
Note: If 'your.isp.mail.server' is NOT resolvable on the localhost, then
you
must use the IP address. When you use the IP address, you must put it in
[square brackets], like [192.168.2.1].
Now from /etc/mail, type
make all install
then shutdown and restart the server using your method of choice, or just
type
/etc/rc.d/sendmail restart
And try to send email again. All should work now.
But you must remember to configure the TARGET mail server to allow this
host
to send. I'll leave that as an exercise for you.
lane
Have some doubts... about this procedure.. I'm going to explain why....
In this server (from the example, server.FreeBSD.4.6-RELEASE, where we can
send e-mail, but sendmail it's not running, rc.conf contains:
sendmail_enable="NONE", sendmail it's not running:
ps axwww | grep sendmail
19702 p0 D+ 0:00.00 grep sendmail
And how I showed you in this messages, we are able to send messages, well..
root can do it, as a normal user I can't:
mail -v user@xxxxxxxxxxxxxxx
Subject: TEST
Testing from FreeBSD 4.6-RELEASE
.
EOT
collect: Cannot write ./dfkBDJDkW19705 (bfcommit, uid=xxx): Permission
denied
queueup: cannot create queue temp file ./tfkBDJDkW19705, uid=xxx:
Permission denied
The older sysadmin who made this configuration with FreeBSD 4.6-RELEASE,
quit the job and didn't leave any documentation, a how to, nothing, were he
explain how he did this.
That's the reason why we are looking to repeat this configuration with
FreeBSD 6.1-RELEASE, but couldn't do it.. yet.
Thank you for your help.
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@xxxxxxxxxxx"
Post /etc/rc.conf from one of the servers that does what you want and that
should lead us to what mta is handling email.
Also, please post a copy of
ls -al /usr/local/etc/rc.d
from that same working server, just in case there is a custom script starting
the mta.
lane
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"
- Follow-Ups:
- References:
- Prev by Date: Re: Shar question
- Next by Date: Re: Shar question
- Previous by thread: Re: how do I see security logs without turning on sendmail?
- Next by thread: Re: how do I see security logs without turning on sendmail?
- Index(es):
Relevant Pages
|
|
