SUMMARY: Solaris 10 Sendmail problem



First of all, thanks to everyone and especially the following who each had
a piece of the puzzle:

Andrew Watkins
Aaron Lineberger
Paul Sagneri
Crist Clark

The main problem was that I upgraded from Solaris 8 to Solaris 10 :)

Many of my problems surrounded the changes made to Sendmail in revision
8.12 (Solaris 8 runs sendmail 8.11.7p3+Sun, Solaris 10 is at sendmail
8.13.7+Sun). In sendmail 8.12 they introduced the default of not running
suid root.

I had to remove the submit.cf file (which allowed mail to be recieved, but
broke outgoing mail). I then modified paramenters in submit.cf to allow
outgoing mail again.

I had to fix permissions on the various folders used by sendmail to update
the proper users and groups for priv. separation (user/group smmsp, etc.)

I then had to clean up my sendmail.cf file to correct entries that were
tolerated in the older version of sendmail, but not the newer.

Again, thank you to all who helped on this.

Louis Perley

On Thu, 29 Mar 2007, Louis Perley wrote:

Hello all,
I've been struggling to get sendmail to accept outside connections
on my Solaris 10 server (it was upgraded from Solaris 8, which was
working fine). I can send outbound email just fine with no problems,
but it will only accept connections from localhost, not anything
else. I've verified it is enabled in SMF. I've looked around (both in
SunManagers archives and on Google) and done the following, with no
net change.

Changed the setting for local_only to false as seen in the sendmail
man page
# svccfg -s svc:/network/smtp:sendmail setprop config/local_only = false
# svcadm refresh svc:/network/smtp:sendmail

I then thought that maybe it was TCP_WRAPPERS that was causing me
problems , so I added

sendmail: ALL

to /etc/hosts.allow

svcs does show it as running
online 21:44:23 svc:/network/smtp:sendmail

And this is the net result:
$ mconnect localhost
connecting to host localhost (127.0.0.1), port 25
connection open
220 mosiah.rootdomain.net ESMTP Sendmail 8.13.7+Sun/8.13.7; Wed, 28
Mar 2007 21:55:23 -0600 (MDT)

This has always worked, but anything else on the local machine(IP,
DNS Name, etc) fails as follows:
$ mconnect ccc.xx.xxx.24
connecting to host ccc.xx.xxx.24 (ccc.xx.xxx.24), port 25
connect: Connection refused

$ mconnect mosiah.rootdomain.net
connecting to host mosiah.rootdomain.net (ccc.xx.xxx.24), port 25
connect: Connection refused


Most of the googling I've done points me to stuff about how inetd is
managed on Solaris 10 with inetadm and such, which hasn't helped
since it appears to be managed solely by SMF (though I guess the
reason this keeps popping up in google is that telnetd and such are
also now linked to use TCP_WRAPPERS)

Where do I go from here? What have I missed? I will summarize so that
it will show up in the archive for others.

Thanks,

Louis Perley
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



Relevant Pages

  • Re: daemon MTA-IPv4: Problem creating SMTP socket?
    ... Personally I would specify -n, too, as I find port numbers much ... On Solaris as old as you appear to be runnning ... When I use netstat -an | grep \.25 I get the following: ... If you have sendmail running that doesnt match the PID ...
    (comp.mail.sendmail)
  • Solaris 10 Sendmail problem
    ... Changed the setting for local_only to false as seen in the sendmail ... connecting to host localhost, port 25 ...
    (SunManagers)
  • sendmail Hacked???
    ... when we are telnet'ing to port 25 of our mail server (Solaris 8 system ... Any idea what's wrong with our sendmail config? ...
    (comp.mail.sendmail)
  • Re: Help: -- How to setup sendmail.mc and /etc/mail/authinfo for sbcglobal.net users??
    ... Your Sendmail did not start any AUTH command. ... dnl # This is the sendmail macro config file for m4. ... dnl # preferred sendmail daemon due to port 25 being blocked or redirected find ... dnl # starting immediately in TLS mode upon connecting. ...
    (Fedora)
  • RE: I think Ive been hacked...please help!
    ... > connecting within seconds of boot. ... port scanning the machine from the outside ... experience performing incident response activities, ... one will run netstat and see something listening on ...
    (Incidents)