Ronald W. Heiby wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Thursday, July 24, 2003, 2:24:33 AM, Gerry wrote:
>> It looks like you are using a box by the name of
>> falkor.off.the-strategis.com and your mail server is
> 
> My notebook PC is "falkor". When I am in my office, it becomes
> "falkor.off.the-strategis.com. When I am at home, it becomes
> "falkor.home.the-strategis.com". Neither "off" nor "home" is really
> out there in the public DNS as an officially delegated zone. Apart
> from showing up in obscure Email headers, they should be pretty much
> invisible to the Internet. 

If your e-mail server accepts connections from non-resolvable ip's, then I
guess the above is fine. You should really re-think that strategy though.

> 
>> datapotata.off.the-strategis.com.
> 
> That is the internal name of the mail server that sits at my office.
> 
>> I just tried a host name lookup for
>> your server and couldn't find an ip address for it.
> 
> It is reached for incoming SMTP Email by the name
> "lab.the-strategis.com", which resolves to 209.242.32.238.

But your mx records for the-strategis.com resolve to a round-robin of mail
servers. Are you just trying to use the above server for your road warriors?

> 
>> However, the redhat server thinks it's 209.242.32.237???
>> I couldn't do a reverse lookup on that either?
> 
> The ISP from whom we get our T-1 connection has the Cisco set up to
> map any outgoing connections from our office out as coming from the
> .237 address, rather than the .238 address. I don't understand why,
> but they seem to like it that way. I'm not sure whether it is
> appropriate to give that address a reverse lookup name, since no
> forward connection to it would go anywhere useful.
> 
>> BTW, notice that you authenticated to your server.
> 
> Yup. When I sit with "falkor" in my office, it works fine. When I sit
> with "falkor" at home, it works fine. When I sit with "falkor" at my
> client's site, it pretends it does not know me. Same systems. Same
> mail software. Same config. I'm racking my brain, trying to figure out
> what the difference might be that is causing this. (And,
> simultaneously trying to find time to get "better" authentication
> configured.) 

This is a huge thread. Exactly what is not working here? Is your server
rejecting your authentication request or is it rejecting the fact that your
laptop cannot be looked up. i.e. reverse lookup.

> 
> One thing I just thought of. Sitting here at my client's site,
> "falkor" is just plain "falkor", because there is no Primary DNS
> Suffix defined. I don't see why that would confuse Sendmail into
> ignoring my login/password authentication, though.

Sendmail obtains the canonical name at startup. If the canonical name is not
overriden in your .mc file, then the derived name is used to annouce itself
to the remote MTA.

On falkor, type: sendmail -bt -d0.1 </dev/null

Verify that the canonical name can be resolved by your server. Check your
servers logfiles to see if there are any messages as to why things are not
working. Could be that sendmail is rejecting your connection (prior to
authentication) because falkor cannot be looked up.

Steve Cowles


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to