LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-13-2005, 05:23 PM   #1
gauge73
Member
 
Registered: Jan 2003
Location: Dallas, TX
Distribution: Fedora Core 4
Posts: 420

Rep: Reputation: 30
sendmail log question


I am curious about something I'm seeing in my /var/log/maillog file. Check these lines out:

Jul 13 09:17:21 mail sendmail[22683]: AUTH=server, relay=www.ash-can.com [192.168.1.1], authid=gauge, mech=LOGIN, bits=0
Jul 13 09:17:21 mail sendmail[22683]: j6DEHLXI022683: from=<gauge@ash-can.com>, size=426, class=0, nrcpts=1, msgid=<1121264351.349.7.camel@mainserver.ash-can.com>, proto=ESMTP, daemon=MTA, relay=www.ash-can.com [192.168.1.1]
Jul 13 09:17:24 mail sendmail[22685]: j6DEHLXI022683: to=<jeffp@heritagegalleries.com>, ctladdr=<gauge@ash-can.com> (500/500), delay=00:00:03, xdelay=00:00:03, mailer=esmtp, pri=120426, relay=emailscan5.mci.com. [216.82.244.147], dsn=2.0.0, stat=Sent (ok 1121264087 qp 29393 server-5.tower-98.messagelabs.com!1121264086!19657430!1)

What I don't get isthe fact that it claims to be relaying to 192.168.1.1, which is my firewall's internal IP address. In the first two entries there is a relay=www.ash-can.com portion, which seems wrong because I didn't configure my sendmail server (knowingly, anyway) to relay mail off my firewall. However, that third entry seems to be right when it says relay=emailscan5.mci.com (which is where heritagegalleries.com's MX record is pointing).

Am I just reading this wrong?
 
Old 07-13-2005, 05:52 PM   #2
Pete M
Member
 
Registered: Aug 2003
Location: UK
Distribution: Redhat 9 FC 3 SUSE 9.2 SUSE 9.3 Gentoo 2005.0 Debian Sid
Posts: 657

Rep: Reputation: 32
gauge73

Quote:
relay=www.ash-can.com [192.168.1.1], authid=gauge, mech=LOGIN, bits=0
Is where the mail originated from so I assume it was sent from 192.168.1.1


Sendmail is telling you that it is allowing 192.168.1.1 to relay through it
Quote:
proto=ESMTP, daemon=MTA, relay=www.ash-can.com [192.168.1.1]
Pete
 
Old 07-13-2005, 05:56 PM   #3
gauge73
Member
 
Registered: Jan 2003
Location: Dallas, TX
Distribution: Fedora Core 4
Posts: 420

Original Poster
Rep: Reputation: 30
Doh! I should have realized. I used to run my email client on the mail server itself. I forgot I switched back to the firewall (which used to be my only other machine). That explains it. Thanks!
 
Old 07-13-2005, 06:06 PM   #4
Pete M
Member
 
Registered: Aug 2003
Location: UK
Distribution: Redhat 9 FC 3 SUSE 9.2 SUSE 9.3 Gentoo 2005.0 Debian Sid
Posts: 657

Rep: Reputation: 32
No problem gauge73

Sendmail is very confusing at the best of times

Pete
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Sendmail Log question JediKnight2 Linux - Security 2 09-27-2005 10:43 PM
sendmail log part 2 dmedici Linux - Software 4 08-17-2004 09:53 AM
Sendmail: no log!!! J_Szucs Linux - Software 1 02-27-2004 05:27 AM
sendmail log level markus1982 Linux - Networking 0 12-09-2002 04:36 AM
sendmail.log magyartoth Linux - General 6 02-23-2002 09:07 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 07:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration