sendmail log question
 

I am curious about something I'm seeing in my /var/log/maillog file. Check these lines out:

Jul 13 09:17:21 mail sendmail[22683]: AUTH=server, relay=www.ash-can.com [192.168.1.1], authid=gauge, mech=LOGIN, bits=0
Jul 13 09:17:21 mail sendmail[22683]: j6DEHLXI022683: from=<gauge@ash-can.com>, size=426, class=0, nrcpts=1, msgid=<1121264351.349.7.camel@mainserver.ash-can.com>, proto=ESMTP, daemon=MTA, relay=www.ash-can.com [192.168.1.1]
Jul 13 09:17:24 mail sendmail[22685]: j6DEHLXI022683: to=<jeffp@heritagegalleries.com>, ctladdr=<gauge@ash-can.com> (500/500), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=120426, relay=emailscan5.mci.com. [216.82.244.147], dsn=2.0.0, stat=Sent (ok 1121264087 qp 29393 server-5.tower-98.messagelabs.com!1121264086!19657430!1)

What I don't get isthe fact that it claims to be relaying to 192.168.1.1, which is my firewall's internal IP address. In the first two entries there is a relay=www.ash-can.com portion, which seems wrong because I didn't configure my sendmail server (knowingly, anyway) to relay mail off my firewall. However, that third entry seems to be right when it says relay=emailscan5.mci.com (which is where heritagegalleries.com's MX record is pointing).

Am I just reading this wrong?

gauge73

Is where the mail originated from so I assume it was sent from 192.168.1.1


Sendmail is telling you that it is allowing 192.168.1.1 to relay through it
Pete

Doh! I should have realized. I used to run my email client on the mail server itself. I forgot I switched back to the firewall (which used to be my only other machine). That explains it. Thanks! :)

No problem gauge73

Sendmail is very confusing at the best of times

Pete