Re: Daily report cannot be emailed to a jailed mail server

2009-10-07 Thread Steve Bertrand
David N wrote:
> 2009/10/8 Steve Bertrand :
>> David N wrote:

[ big snips ]

>>> When i try to send an email i get

>>> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: SYSERR(root): MX
>>> list for anotherdomain.com.au. points back to server.net

>> Nonetheless, you can force Sendmail to push email to a different server
>> directly (overriding the DNS MX entries) with a 'mailertable' file in
>> /etc/mail. Here's one on a secondary MX:
>>
>> %cat /etc/mail/mailertable
>> ibctech.ca  smtp:[smtp.ibctech.ca]
>> ipv6canada.com  smtp:[smtp.ipv6canada.com]
>> ...
>>
>> After the file is created, a simple 'make' in /etc/mail will build the
>> mailertable.db file for you and take effect immediately (much like
>> 'newaliases').

> Thank you so much, it worked =)
> 
> My MX records are correct, i could get mail from the outside, but just
> couldn't get the daily reports to deliver it.

I'm glad it worked. Believe me, if that simple change made it work for
you, then it was worth my headache to have spent the time to learn it
for myself ;)

For the last few years, I've only used Sendmail (or sendmail) to act as
a backup MX, or to directly deliver mail from the box I am on...hence,
it's been a while...

There may be other ramifications to using `mailertable' in your
particular environment.

I don't know how your system will react, given a default setup and a
mailertable entry.

It's possible (but untested) that if the server that is specified in the
mailertable is down, your reports might not make it to you ( whether
that's bad or good is up for interpretation... I've always known no news
as good news ;)

Perhaps Giorgos or someone else may be able to provide a better
understanding.

Steve
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Daily report cannot be emailed to a jailed mail server

2009-10-07 Thread George Davidovich
On Thu, Oct 08, 2009 at 09:02:50AM +1100, David N wrote:
> FreeBSD 7.2-R box with 10 jails.
> 
> The mail server (actually its a mail filter) is hosted on the same
> server inside a jail.
> 
> I can't seem to get the main server reports to be sent to the mail
> filter inside the jail inside the same box.
> 
> so.. r...@localhost tries to send an email to
> some...@anotherdomain.com.au
> 
> The MX entry for anotherdomain.com.au points to the mailfilter on the
> server (jailed).
>
> I've changed my /etc/mail/aliases to have
> root: some...@anotherdomain.com.au
> and ran newaliases.

It's been already pointed out that you aren't providing much information
to go on, so here's my WAG of what is happening.

Changing the root alias root could work, but consider the case of mail
from the jailhost being rejected by the jailed mailserver.  The bounce
message will be addressed to POSTMASTER on the jailhost, which points to
root on the jailhost, which points back to the jailed mailserver trying
to send the bounce, which points to ...

You can examine the scenario for yourself either by listening to a
married couple on the verge of divorce argue with one another, or more
specifically, by running

  [r...@jailhost] sendmail -bv root
  [r...@jail] sendmail -bv postmas...@jailhost.server.net

> When i try to send an email i get
> in /var/log/messages
> sm-mta[94682]: n97LeeOw094682: Losing ./qfn97LeeOw094682: savemail panic
> Oct  8 08:40:40 server sm-mta[94682]: n97LeeOw094682: SYSERR(root):
> savemail: cannot save rejected email anywhere
> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: Losing
> ./qfn97LgTYg094713: savemail panic
> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: SYSERR(root):
> savemail: cannot save rejected email anywhere
> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: SYSERR(root): MX
> list for anotherdomain.com.au. points back to server.net

The jailed mailserver is rejecting the mail and is then trying to send a
bounce and can't because it's caught in a loop that ends when Sendmail
says "Look this isn't an argument ... it's just contradiction!" and
bails out.  

Why the jailed mailserver is rejecting the mail is a separate issue. 

> In /var/log/maillog
> n97Ll7VV095129: to=some...@anotherdomain.com.au,
> ctladdr= (0/0), delay=00:00:00, xdelay=00:00:00,
> mailer=esmtp, pri=30715, relay=anotherdomain.com.au., dsn=5.3.5,
> stat=Local configuration error
> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: n97Ll7VV095130:
> DSN: Local configuration error

That's from the maillog on the jailhost.  More relevant to why the
jailed mailserver has rejected the mail would be the jail's maillog
entries (or whatever logging was done by the "filter" installed there). 

Either way, for the interim I'd suggest undoing your changes, rebuilding
your aliases and consider implementing an alternate approach.  For
anyone to figure out conclusively what's happening, you'll have to
provide more information.

-- 
George
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Daily report cannot be emailed to a jailed mail server

2009-10-07 Thread David N
2009/10/8 Steve Bertrand :
> David N wrote:
>> Hi,
>>
>> FreeBSD 7.2-R box with 10 jails.
>>
>> The mail server (actually its a mail filter) is hosted on the same
>> server inside a jail.
>>
>> I can't seem to get the main server reports to be sent to the mail
>> filter inside the jail inside the same box.
>>
>> so.. r...@localhost tries to send an email to some...@anotherdomain.com.au
>>
>> The MX entry for anotherdomain.com.au points to the mailfilter on the
>> server (jailed).
>>
>>
>> I've changed my /etc/mail/aliases to have
>> root: some...@anotherdomain.com.au
>> and ran newaliases.
>>
>> When i try to send an email i get
>> in /var/log/messages
>> sm-mta[94682]: n97LeeOw094682: Losing ./qfn97LeeOw094682: savemail panic
>> Oct  8 08:40:40 server sm-mta[94682]: n97LeeOw094682: SYSERR(root):
>> savemail: cannot save rejected email anywhere
>> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: Losing
>> ./qfn97LgTYg094713: savemail panic
>> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: SYSERR(root):
>> savemail: cannot save rejected email anywhere
>> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: SYSERR(root): MX
>> list for anotherdomain.com.au. points back to server.net
>>
>> In /var/log/maillog
>> n97Ll7VV095129: to=some...@anotherdomain.com.au,
>> ctladdr= (0/0), delay=00:00:00, xdelay=00:00:00,
>> mailer=esmtp, pri=30715, relay=anotherdomain.com.au., dsn=5.3.5,
>> stat=Local configuration error
>> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: n97Ll7VV095130:
>> DSN: Local configuration error
>>
>> Anyone have any ideas on how to fix this?
>
> If you hadn't of sanitized the domain names, it would have been easier
> to troubleshoot...
>
> Nonetheless, you can force Sendmail to push email to a different server
> directly (overriding the DNS MX entries) with a 'mailertable' file in
> /etc/mail. Here's one on a secondary MX:
>
> %cat /etc/mail/mailertable
> ibctech.ca      smtp:[smtp.ibctech.ca]
> ipv6canada.com  smtp:[smtp.ipv6canada.com]
> ...
>
> After the file is created, a simple 'make' in /etc/mail will build the
> mailertable.db file for you and take effect immediately (much like
> 'newaliases').
>
> However, it's hard to tell if this recommendation will solve your
> problem though. Without knowing the real domain, we can't perform DNS
> tests against it to get a better understanding of the situation.
>
> Cheers,
>
> Steve
>
>


Thank you so much, it worked =)

My MX records are correct, i could get mail from the outside, but just
couldn't get the daily reports to deliver it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Daily report cannot be emailed to a jailed mail server

2009-10-07 Thread Steve Bertrand
David N wrote:
> Hi,
> 
> FreeBSD 7.2-R box with 10 jails.
> 
> The mail server (actually its a mail filter) is hosted on the same
> server inside a jail.
> 
> I can't seem to get the main server reports to be sent to the mail
> filter inside the jail inside the same box.
> 
> so.. r...@localhost tries to send an email to some...@anotherdomain.com.au
> 
> The MX entry for anotherdomain.com.au points to the mailfilter on the
> server (jailed).
> 
> 
> I've changed my /etc/mail/aliases to have
> root: some...@anotherdomain.com.au
> and ran newaliases.
> 
> When i try to send an email i get
> in /var/log/messages
> sm-mta[94682]: n97LeeOw094682: Losing ./qfn97LeeOw094682: savemail panic
> Oct  8 08:40:40 server sm-mta[94682]: n97LeeOw094682: SYSERR(root):
> savemail: cannot save rejected email anywhere
> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: Losing
> ./qfn97LgTYg094713: savemail panic
> Oct  8 08:42:30 server sm-mta[94713]: n97LgTYg094713: SYSERR(root):
> savemail: cannot save rejected email anywhere
> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: SYSERR(root): MX
> list for anotherdomain.com.au. points back to server.net
> 
> In /var/log/maillog
> n97Ll7VV095129: to=some...@anotherdomain.com.au,
> ctladdr= (0/0), delay=00:00:00, xdelay=00:00:00,
> mailer=esmtp, pri=30715, relay=anotherdomain.com.au., dsn=5.3.5,
> stat=Local configuration error
> Oct  8 08:47:07 server sm-mta[95130]: n97Ll7VV095129: n97Ll7VV095130:
> DSN: Local configuration error
> 
> Anyone have any ideas on how to fix this?

If you hadn't of sanitized the domain names, it would have been easier
to troubleshoot...

Nonetheless, you can force Sendmail to push email to a different server
directly (overriding the DNS MX entries) with a 'mailertable' file in
/etc/mail. Here's one on a secondary MX:

%cat /etc/mail/mailertable
ibctech.ca  smtp:[smtp.ibctech.ca]
ipv6canada.com  smtp:[smtp.ipv6canada.com]
...

After the file is created, a simple 'make' in /etc/mail will build the
mailertable.db file for you and take effect immediately (much like
'newaliases').

However, it's hard to tell if this recommendation will solve your
problem though. Without knowing the real domain, we can't perform DNS
tests against it to get a better understanding of the situation.

Cheers,

Steve

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"