[cobalt-users] RaQ4 sendmail update - fix

[David Lucas <david@xxxxxxxxxxxxxxxx>]

OK, the sendmail messed up my system also.

I had the pkgmaster sendmail update.  I removed it and the pop before smtp 
update as someone else said to do.

I then installed the two sendmail updates from Sun.

I then modified my sendmail.cf file.

The updates create several new .cf files and seem to swap between them.

I made the following updates to my sendmail.cf file.  I made updates to put 
back my dnsbl lists.

If anyone would like me to email them a text file, let me know.

Hope this helps.  I now do not have anyone with problems relaying anymore.


At approx line 145 I have the following

**************************
CPREDIRECT

# Access list database (for spam stomping)
Kaccess hash -o /etc/mail/access

# Virtual user table (maps incoming users)
Kvirtuser hash -o /etc/mail/virtusertable

# Configuration version number
DZ8.10.2
****************************
I changed it to:

****************************
CPREDIRECT

# Access list database (for spam stomping)
Kaccess hash -o /etc/mail/access

# Pop-before-smtp secondary access hash
Kpopauth hash -a<MATCH> /etc/mail/popip.db

# Virtual user table (maps incoming users)
Kvirtuser hash -o /etc/mail/virtusertable

# Configuration version number
DZ8.10.2
****************************

at around line 1064 I have the following heading

######################################################################
###  check_rcpt -- check SMTP `RCPT TO:' command argument
######################################################################

Between the lines

******************************
SLocal_check_rcpt
Scheck_rcpt
*****************************

I added the following

*****************************
# Put the address into cannonical form (even if it doesn't resolve to an MX).
R$*			$: $>Parse0 03 $1
R$* < $* > $*		$: $1 < $2 . > $3
R$* < $* . . > $*	$1 < $2 . > $3
# Test against pop-before-relay hash
R$*			$: < $&{client_addr} >
R< $* >			$(popauth $1 $)
R$* < MATCH >		$#OK

*******************************


at line 1139 I have the following

************************
R$*			$#error $@ 5.7.1 $: "550 Relaying denied"
**************************

and it was changed to

**********************
R$*			$#error $@ 5.7.1 $: "550 Relaying denied.  Please check your mail first."

**********************


At around line 984 I have

######################################################################
###  check_relay -- check hostname/address on SMTP startup
######################################################################

and at about 990 I have

######################################################################
###  check_mail -- check SMTP `MAIL FROM:' command argument
######################################################################


Just prior to the heading at 990 I added the following for my spam blocking

*************************
# DNS based IP address spam list relays.osirusoft.com
R$*			$: $&{client_addr}
R::ffff:$-.$-.$-.$-	$: <?> $(host $4.$3.$2.$1.relays.osirusoft.com. $: OK $)
R$-.$-.$-.$-		$: <?> $(host $4.$3.$2.$1.relays.osirusoft.com. $: OK $)
R<?>OK			$: OKSOFAR
R<?>$+			$#error $@ 5.7.1 $: Rejected - see 
http://relays.osirusoft.com/$&{client_addr} "

# DNS based IP address spam list bl.spamcop.net
R$*			$: $&{client_addr}
R::ffff:$-.$-.$-.$-	$: <?> $(host $4.$3.$2.$1.bl.spamcop.net. $: OK $)
R$-.$-.$-.$-		$: <?> $(host $4.$3.$2.$1.bl.spamcop.net. $: OK $)
R<?>OK			$: OKSOFAR
R<?>$+			$#error $@ 5.7.1 $: "Spam blocked see: 
http://spamcop.net/bl.shtml?"$&{client_addr}

# DNS based IP address spam list dnsbl.njabl.org
R$*			$: $&{client_addr}
R::ffff:$-.$-.$-.$-	$: <?> $(host $4.$3.$2.$1.dnsbl.njabl.org. $: OK $)
R$-.$-.$-.$-		$: <?> $(host $4.$3.$2.$1.dnsbl.njabl.org. $: OK $)
R<?>OK			$: OKSOFAR
R<?>$+			$#error $@ 5.7.1 $: Message from $&{client_addr} rejected - see 
http://njabl.org/$&{client_addr}

# DNS based IP address spam list dnsbl.sorbs.net
R$*			$: $&{client_addr}
R::ffff:$-.$-.$-.$-	$: <?> $(host $4.$3.$2.$1.dnsbl.sorbs.net. $: OK $)
R$-.$-.$-.$-		$: <?> $(host $4.$3.$2.$1.dnsbl.sorbs.net. $: OK $)
R<?>OK			$: OKSOFAR
R<?>$+			$#error $@ 5.7.1 $: "550 Mail from " $&{client_addr} " refused by 
blackhole site dnsbl.sorbs.net"
************************

at line 1088 I have

***********************
# authenticated by a trusted mechanism?
***********************

just prior to it I added

**********************


# blacklist local users or any host from receiving mail
R$*			$: <?> $1
R<?> $+ < @ $=w >	$: <> <$1 < @ $2 >> $| <F:$1@$2> <U:$1@>
R<?> $+ < @ $* >	$: <> <$1 < @ $2 >> $| <F:$1@$2> <H:$2>
R<?> $+			$: <> <$1> $| <U:$1@>
R<> <$*> $| <$+>	$: <@> <$1> $| $>SearchList <+To> $| <$2> <>
R<@> <$*> $| <$*>	$: <$2> <$1>		reverse result
R<?> <$*>		$: @ $1		mark address as no match
R<$={Accept}> <$*>	$: @ $2		mark address as no match

R<REJECT> $*		$#error $@ 5.2.1 $: "550 Mailbox disabled for this recipient"
R<DISCARD> $*		$#discard $: discard
R<ERROR:$-.$-.$-:$+> $*		$#error $@ $1.$2.$3 $: $4
R<ERROR:$+> $*		$#error $: $1
R<$+> $*		$#error $: $1		error from access db
R@ $*			$1		remove mark

**********************


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.