[gentoo-user] Re: OT - Can't send mail from non-root accounts [SOLVED]

[Michael Sullivan]

On Fri, 2007-07-06 at 10:39 -0500, Michael Sullivan wrote:
> I have three computers:
>
> baby.espersunited.com (192.168.1.2)
> camille.espersunited.com (192.168.1.3)
> catherine.espersunited.com (192.168.1.4)
>
> camille and catherine are running ssmpt:
>
> camille ~ # emerge -pv ssmtp
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild   R   ] mail-mta/ssmtp-2.61-r2  USE="ipv6 ssl -mailwrapper
> -md5sum" 53 kB
>
> Total: 1 package (1 reinstall), Size of downloads: 53 kB
>
>
> catherine ~ # emerge -pv ssmtp
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild   R   ] mail-mta/ssmtp-2.61-r2  USE="ipv6 ssl -mailwrapper
> -md5sum" 53 kB
>
> Total: 1 package (1 reinstall), Size of downloads: 53 kB
>
>
> baby is running exim:
>
> baby ~ # emerge -pv exim
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild   R   ] mail-mta/exim-4.67  USE="exiscan exiscan-acl ldap mysql
> pam perl sasl ssl syslog tcpd -X -dnsdb -domainkeys -dovecot-sasl
> -gnutls -ipv6 -lmtp -mailwrapper -mbox -mbx -nis -postgres -radius -spf
> -sqlite -srs" 0 kB
>
> Total: 1 package (1 reinstall), Size of downloads: 0 kB
>
>
>
> camille ~ # emerge -pv ssmtp
>
> These are the packages that would be merged, in order:
>
> Calculating dependencies... done!
> [ebuild   R   ] mail-mta/ssmtp-2.61-r2  USE="ipv6 ssl -mailwrapper
> -md5sum" 53 kB
>
> Total: 1 package (1 reinstall), Size of downloads: 53 kB
> camille ~ # cat /etc/ssmtp/revaliases
> # sSMTP aliases
> #
> # Format:       local_account:outgoing_address:mailhub
> #
> # Example: root:your_login@××××.domain:mailhub.your.domain[:port]
> # where [:port] is an optional port number that defaults to 25.
> #
> michael:michael@baby:baby.espersunited.com
> root:root@baby:baby.espersunited.com
> postmaster:root@baby:baby.espersunited.com
>
>
>
> catherine ~ # cat /etc/ssmtp/revaliases
> # sSMTP aliases
> #
> # Format:       local_account:outgoing_address:mailhub
> #
> # Example: root:your_login@××××.domain:mailhub.your.domain[:port]
> # where [:port] is an optional port number that defaults to 25.
> #
> root:root@baby:baby.espersunited.com
> amy@catherine:amy@baby:baby.espersunited.com
>
>
> Here is baby's exim.conf:
>
> baby ~ # cat /etc/exim/exim.conf | sed '/#/ d'
>
> domainlist local_domains = @ : espersunited.com :
> baby.espersunited.com : localhost : localdomain :
> camille.espersunited.com : catherine.espersunited.com : camille :
> catherine
> domainlist relay_to_domains =
> hostlist   relay_from_hosts = 127.0.0.1 : 192.168.1.2 : 192.168.1.3 :
> 192.168.1.4
> acl_smtp_rcpt = acl_check_rcpt
> acl_smtp_data = acl_check_data
> acl_smtp_mime = acl_check_mime
> av_scanner = clamd:/tmp/clamd
> spamd_address = 127.0.0.1 783
> qualify_domain = espersunited.com
> never_users = root
> host_lookup = *
> rfc1413_hosts = *
> rfc1413_query_timeout = 5s
> sender_unqualified_hosts = baby.espersunited.com :
> camille.espersunited.com : catherine.espersunited.com :
> localhost.localdomain
> recipient_unqualified_hosts = baby.espersunited.com :
> camille.espersunited.com : catherine.espersunited.com :
> localhost.localdomain
> ignore_bounce_errors_after = 2d
> timeout_frozen_after = 7d
> begin acl
> acl_check_rcpt:
>   accept  hosts = :
>   deny    message       = Restricted characters in address
>           domains       = +local_domains
>           local_parts   = ^[.] : ^.*[@%!/|]
>   deny    message       = Restricted characters in address
>           domains       = !+local_domains
>           local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
>   accept  local_parts   = postmaster
>           domains       = +local_domains
>   require verify        = sender
>   accept  hosts         = +relay_from_hosts
>           control       = submission
>   accept  authenticated = *
>           control       = submission
>   require message = relay not permitted
>           domains = +local_domains : +relay_to_domains
>   require verify = recipient
>   accept
> acl_check_data:
> warn    message    = X-SpamScore: $spam_score ($spam_bar)
>         spam       = nobody:true
> warn    message    = X-SpamReport: $spam_report
>         spam       = nobody:true
> warn    message    = X-Spam-Flag: ${if \
>                      >{$spam_score_int}{58}{Almost Certainly}\
>                      {${if >{$spam_score_int}{55}{Probably}\
>                      {${if >{$spam_score_int}{50}{Possibly}{Doubtful}\
>                      }}}}}
>         spam       = nobody
> warn message = Subject: [*SPAM*] $h_Subject ${if \
>                      >{$spam_score_int}{58}{Almost Certainly}\
>                      {${if >{$spam_score_int}{55}{Probably}\
>                      {${if >{$spam_score_int}{50}{Possibly}{Doubtful}\
>                      }}}}}
>         spam       = nobody
> accept
> acl_check_mime:
>    warn decode = default
>    deny message = Blacklisted file extension detected
>    condition = ${if match \
>        {${lc:$mime_filename}} \
>        {\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com|.vbs)$\N} \
>        {1}{0}}
>    accept
> acl_check_content:
>    deny  message = Serious MIME defect detected ($demime_reason)
>    demime = *
>    condition = ${if >{$demime_errorlevel}{2}{1}{0}}
>    deny  message = This message contains malware ($malware_name)
>    malware = *
>    warn  message = X-Spam-Score: $spam_score ($spam_bar)
>    spam = nobody:true
>    warn  message = X-Spam-Report: $spam_report
>    spam = nobody:true
>    warn message = Subject: [*SPAM*] $h_Subject
>    spam = nobody
>    deny  message = This message scored $spam_score points.
> Congratulations!
>    spam = nobody:true
>    condition = ${if >{$spam_score_int}{50}{1}{0}}
>    accept
> begin routers
> dnslookup:
>   driver = dnslookup
>   domains = ! +local_domains
>   transport = remote_smtp
>   ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
>   no_more
> system_aliases:
>   driver = redirect
>   allow_fail
>   allow_defer
>   data = ${lookup{$local_part}lsearch{/etc/mail/aliases}}
>   file_transport = address_file
>   pipe_transport = address_pipe
> userforward:
>   driver = redirect
>   check_local_user
>   file = $home/.forward
>   no_verify
>   no_expn
>   check_ancestor
>   file_transport = address_file
>   pipe_transport = address_pipe
>   reply_transport = address_reply
> localuser:
>   driver = accept
>   check_local_user
>   transport = local_delivery
>   cannot_route_message = Unknown user
> begin transports
> remote_smtp:
>   driver = smtp
> local_delivery:
>   driver = appendfile
>   directory = /home/$local_part/.maildir
>   maildir_format
>   delivery_date_add
>   envelope_to_add
>   return_path_add
> address_pipe:
>   driver = pipe
>   return_output
> address_file:
>   driver = appendfile
>   delivery_date_add
>   envelope_to_add
>   return_path_add
> address_reply:
>   driver = autoreply
> begin retry
> *                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h
> begin rewrite
> begin authenticators
>
> The problem is that mail from michael on camille and from amy on
> catherine is not accepted:
>
> michael@camille ~ $ echo "This is a test" | mail -s "Test" michael
> send-mail: RCPT TO:<michael@camille> (550 Sender verify failed)
> Can't send mail: sendmail process failed with error code 1
>
>
> catherine ~ # echo "This is a test" | mail -s "Test" amy
> send-mail: RCPT TO:<amy@catherine> (550 Sender verify failed)
> Can't send mail: sendmail process failed with error code 1
>
>
> But mail from root on both boxes is accepted.  I think this is probably
> exim being paranoid again, but I'm not sure how to fix it.  Can anyone
> help me?
> -Michael Sullivan-

I fixed it.  It wasn't exim - it was something messed up in
ssmtp.conf...

-- 
gentoo-user@g.o mailing list