Hello people, i´m working with virtuals machines to configure Sendmail on Linux.

I work with two domains (ar and org), the configuration is similar in both, so i will write just one.

In org´s mail server:

/etc/hosts

127.0.0.1 localhost.localdomain localhost
10.3.0.2 mail.org mail

/etc/resolv.conf

nameserver 127.0.0.1
(in the machine where sendmail is working, dns server also runs)

/etc/HOSTNAME

mail.org

/etc/mail/local-host-names
org
mail.org

/etc/mail/access
localhost RELAY
localhost.localdomain RELAY
127.0.0.1 RELAY

org RELAY
mail.org RELAY
10.3.0.2 RELAY

/etc/mail/sendmail.mc
include(`/usr/share/sendmail/cf/m4/cf.m4')
VERSIONID(`Configuracion de Lab Redes 2010')dnl
OSTYPE(`linux')dnl
define(`confLOG_LEVEL', `15')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
Dmmail.org
define(`confDOMAIN_NAME', `mail.org')dnl
define(`confTO_IDENT', `0')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`use_cw_file')dnl
FEATURE(`use_ct_file')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(`access_db', `hash -T<TMPF> /etc/mail/access')dnl
FEATURE(`blacklist_recipients')dnl
FEATURE(`local_procmail',`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`always_add_domain')dnl
FEATURE(`redirect')dnl
MASQUERADE_AS(`org')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`masquerade_entire_domain')dnl
FEATURE(`relay_based_on_MX')dnl
EXPOSED_USER(`root')dnl
MAILER(`smtp')dnl
MAILER(`procmail')dnl
Cworg

The emails stopped coming and the server adds to the e-mail addresses the MX record. For example, if i send an email to u1@org in log appears u1@org.mail.org.

Any suggestion?

What do you trying to do with this option? I don't know if this is a proper domain definiton.
At sendmail.org I can see an example definition like this:
http://www.sendmail.org/m4/features...._entire_domain
Did you tried to put there your full domain name.
This email address seems a litle strange. Is this only an example or you want to use email addresses like this?

You also noted that "emails stopped coming". This means -that it worked and after some changes you made it stopped?

First, thanks for reply.

It´s just one example, so i do it in virtual machines.

The configuration that I used before was this:

include(`/usr/share/sendmail/cf/m4/cf.m4')
VERSIONID(`Configuracion de Lab Redes 2010')dnl
OSTYPE(`linux')dnl
define(`confLOG_LEVEL', `15')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
Dmmail.org
define(`confDOMAIN_NAME', `mail.org')dnl
dnl define(`SMART_HOST',`mailserver.example.com')
define(`confTO_IDENT', `0')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`use_cw_file')dnl
FEATURE(`use_ct_file')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(`access_db', `hash -T<TMPF> /etc/mail/access')dnl
FEATURE(`blacklist_recipients')dnl
FEATURE(`local_procmail',`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`always_add_domain')dnl
FEATURE(`redirect')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`relay_based_on_MX')dnl
EXPOSED_USER(`root')dnl
MAILER(`smtp')dnl
MAILER(`procmail')dnl
MASQUERADE_AS(`org')dnl

This configuration was working for users of the same domain, but wasn´t working for externals domains. When i back to this configuration, the error still persist.

Change MASQUERADE_AS ('org') dnl to MASQUERADE_AS (mail.org `') dnl doesn´t work

I will compare my configuration against yours. (I show only the differences)
I don't use local DNS on my server. So my configuration looks like this (resolv.conf):
Those nameservers are public DNS servers from opendns.
I use full hostname. Where the server is the name of my PC within the mydomain.org domain.
I use only two definitions. My configuration is:
The /etc/mail/access is empty for me. I think this is because my server does email RELAY only from authenticated clients. It may be different for you, but you ca try it.

There are some lines in your sendmail.mc what I cannot understand ... this is why I am asking the version of OS. I never saw this in my mc files but it may be different in other distributions.
For the sendmail.mc - some basic information can be useful.
1. What version of sendmail do you use?
2. What OS are you running on?
3. Are you using any configuration utility for sendmail? (Webmin etc.. or only m4)
4. Finally - how do you test your server? (telnet+commands, with some MUA ...)

You arr welcome, I hope it will help you.

1 members found this post helpful.

I use Dmmail.org because in log appears an error "Who i am?" and in the help file of Sendmail gives this solution. In many forums said that Cw is to recognize the primary domain.

The Sendmail version is 8.14.3 and the SO is Slackware 12.2. I Only use m4 to generate the sendmail.cf file and telnet to test the server.

"mail" is the hostname of the server in the domain (as "server" in your domain)

I modify the resolv.conf file like yours (i change the loopback address to public address and aggregate search org) and the sendmail.mc file as follow:
include(`/usr/share/sendmail/cf/m4/cf.m4')
VERSIONID(`Configuracion de Lab Redes 2010')dnl
OSTYPE(`linux')dnl
define(`confLOG_LEVEL', `15')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
TRUST_AUTH_MECH(`EXTERNAL LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
Dmmail.org
define(`confDOMAIN_NAME', `mail.org')dnl
dnl define(`SMART_HOST',`mailserver.example.com')
define(`confTO_IDENT', `0')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`use_cw_file')dnl
FEATURE(`use_ct_file')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(`access_db', `hash -T<TMPF> /etc/mail/access')dnl
FEATURE(`blacklist_recipients')dnl
FEATURE(`local_procmail',`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`always_add_domain')dnl
FEATURE(`redirect')dnl
FEATURE(`masquerade_envelope')dnl
dnl· FEATURE(`relay_based_on_MX')dnl
EXPOSED_USER(`root')dnl
LOCAL_DOMAIN(`mail.org')dnl
MAILER(local)dnl
MAILER(smtp)dnl
MAILER(procmail)dnl
MASQUERADE_AS(`org')dnl

Now the emails from users of the same domain are transmitted, but not between domains...

thanks for your time and patience

This is the problem...

Attached Thumbnails

 

It seems that you still asking for DNS names your own server. (I suppose that the local address on the picture is your server address)
I tried that domain, and it resolves.

In resolv.conf you set up which nameserver should be asked for names. On the picture I can see that it is your own server, so the DNS query for the domain fails.

I found out that you need to restart sendmail after the changes in resolv.conf. I changed for example my own to another DNS and until I didn't restart sendmail it was still asking the old nameserver.

-----
One more thing - although you set up mail server there are some things which has to be configured for the domain on the DNS server which act as authoritative server for that domain. (MX, PTR ...) This DNS server can be your own server (That requires DNS server configuration) or some external server. I use for example external provider for this. Did you take care about your domain correctly?

The problem is when Sendmail search for the ar domain's mail server. The org domain is added to the query.

It is a Sendmail problem because if i use a tool like host, dig or nslookup the query works perfectly.

Sorry... I think I did not really understand what domain you want to use. I don't think that ar or org are valid end user domains.
From wikipedia:
I thought that when you write "I use domains ar and org" you mean that after these names you use some top level domain. ar.com or ar.net for example. But I am not sure if domain like that (ar, org) are valid for use.
You cannot use domain without the Top Level Domain names. the name server looks for names based upon of this name (org,net,com,de) for each of this TLDs there are root servers which holds the valid second-level domain names.
I am not really an expert in unusual ways of domain name use, so If you want to use domain names some other strange ways I cannot help to you.

I know that ar and org are TLDs, is just one example. That's why I use virtual machines (User Mode Linux).

In fact the example started explaining how DNS works, even i have configured a zone in-addr.arpa for reverse resolutions, and now i want to add a mail server in the example.

Can you post the output of this? For example:
On the attached picture I can see a standard DNS query of domain ar.org.
What do you suppose, what it should look like?

This resolution is made with nslookup. The resolution of the domain and mail server are correct. That is why I guess that the error is when Sendmail query for the mail server of ar domain, because he adds her domain to the query.

Attached Thumbnails

 

I would consider to play with (remove) these options in sendmail.mc. I didn't made much study about this directives but it seems to me that it can help.
Please let me know how it goes.
I can see the environment where you run these servers now. It looks interesting.
It seems to me that you run inside your own network with more local networks. Do you going to use these servers in the public net or you just test those servers inside an isolated network?

The purpose is for study, otherwise see how DNS works require several machines on a local network (with arpa zone including).

The topology is created virtually on a single host and thus able to work in larger scenarios.

Tonight I make those changes and tell you the result,
Greetings dear friend

These changes don´t work... =(

I found that if I put a point to the address (eg from user@org. to user@ar.), the relay is working properly (in the registry appears relay=mail.ar), but the mail is returned because the sender's domain does not exist (data format error)