sendmail smtp认证的怪异问题

  1<yancy_zhang@sohu.com>... Relaying denied. IP name lookup failed [192.168.0.23]', 端口: 25, 安全(SSL): 否, 服务器错误: 550, 错误号: 0x800CCC79   
  2  
  3  
  4  
  5奇怪的是这里拒收的ip怎么是我的内网ip，我的网关是192.168.0.1通过它做nat上网。   
  6  
  7下面是我的access文件   
  8  
  9
 10
 11&gt; quote: 
 12&gt; 
 13&gt; * * *
 14&gt; 
 15&gt;   
 16&gt;    
 17&gt;    
 18&gt;    
 19&gt;  # Check the /usr/share/doc/sendmail/README.cf file for a description   
 20&gt;    
 21&gt;  # of the format of this file. (search for access_db in that file)   
 22&gt;    
 23&gt;  # The /usr/share/doc/sendmail/README.cf is part of the sendmail-doc   
 24&gt;    
 25&gt;  # package.   
 26&gt;    
 27&gt;  #   
 28&gt;    
 29&gt;  # by default we allow relaying from localhost...   
 30&gt;    
 31&gt;  localhost.localdomain RELAY   
 32&gt;    
 33&gt;  localhost RELAY   
 34&gt;    
 35&gt;  127.0.0.1 RELAY   
 36&gt;    
 37&gt;  0.0.0.0 RELAY   
 38&gt;    
 39&gt; 
 40&gt; 
 41&gt; * * *
 42
 43  
 44  
 45  
 46  
 47  
 48  
 49sendmail.mc   
 50  
 51  
 52  
 53
 54
 55&gt; quote: 
 56&gt; 
 57&gt; * * *
 58&gt; 
 59&gt;   
 60&gt;    
 61&gt;  divert(-1)dnl   
 62&gt;    
 63&gt;  dnl #   
 64&gt;    
 65&gt;  dnl # This is the sendmail macro config file for m4. If you make changes to   
 66&gt;    
 67&gt;  dnl # /etc/mail/sendmail.mc, you will need to regenerate the   
 68&gt;    
 69&gt;  dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is   
 70&gt;    
 71&gt;  dnl # installed and then performing a   
 72&gt;    
 73&gt;  dnl #   
 74&gt;    
 75&gt;  dnl # make -C /etc/mail   
 76&gt;    
 77&gt;  dnl #   
 78&gt;    
 79&gt;  include(`/usr/share/sendmail-cf/m4/cf.m4')dnl   
 80&gt;    
 81&gt;  VERSIONID(`setup for Red Hat Linux')dnl   
 82&gt;    
 83&gt;  OSTYPE(`linux')dnl   
 84&gt;    
 85&gt;  dnl #   
 86&gt;    
 87&gt;  dnl # Uncomment and edit the following line if your outgoing mail needs to   
 88&gt;    
 89&gt;  dnl # be sent out through an external mail server:   
 90&gt;    
 91&gt;  dnl #   
 92&gt;    
 93&gt;  dnl define(`SMART_HOST',`smtp.your.provider')   
 94&gt;    
 95&gt;  define(`SMART_HOST',` www.reggate.com ')   
 96&gt;    
 97&gt;  dnl #   
 98&gt;    
 99&gt;  define(`confDEF_USER_ID',``8:12'')dnl   
100&gt;    
101&gt;  dnl define(`confAUTO_REBUILD')dnl   
102&gt;    
103&gt;  define(`confTO_CONNECT', `1m')dnl   
104&gt;    
105&gt;  define(`confTRY_NULL_MX_LIST',true)dnl   
106&gt;    
107&gt;  define(`confDONT_PROBE_INTERFACES',true)dnl   
108&gt;    
109&gt;  define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl   
110&gt;    
111&gt;  define(`ALIAS_FILE', `/etc/aliases')dnl   
112&gt;    
113&gt;  dnl define(`STATUS_FILE', `/etc/mail/statistics')dnl   
114&gt;    
115&gt;  define(`UUCP_MAILER_MAX', `2000000')dnl   
116&gt;    
117&gt;  define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl   
118&gt;    
119&gt;  define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl   
120&gt;    
121&gt;  define(`confAUTH_OPTIONS', `A')dnl   
122&gt;    
123&gt;  dnl #   
124&gt;    
125&gt;  dnl # The following allows relaying if the user authenticates, and disallows   
126&gt;    
127&gt;  dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links   
128&gt;    
129&gt;  dnl #   
130&gt;    
131&gt;  dnl define(`confAUTH_OPTIONS', `A p')dnl   
132&gt;    
133&gt;  dnl #   
134&gt;    
135&gt;  dnl # PLAIN is the preferred plaintext authentication method and used by   
136&gt;    
137&gt;  dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do   
138&gt;    
139&gt;  dnl # use LOGIN. Other mechanisms should be used if the connection is not   
140&gt;    
141&gt;  dnl # guaranteed secure.   
142&gt;    
143&gt;  dnl #   
144&gt;    
145&gt;  dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl   
146&gt;    
147&gt;  TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl   
148&gt;    
149&gt;  dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl   
150&gt;    
151&gt;  define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl   
152&gt;    
153&gt;  dnl #   
154&gt;    
155&gt;  dnl # Rudimentary information on creating certificates for sendmail TLS:   
156&gt;    
157&gt;  dnl # make -C /usr/share/ssl/certs usage   
158&gt;    
159&gt;  dnl #   
160&gt;    
161&gt;  dnl define(`confCACERT_PATH',`/usr/share/ssl/certs')   
162&gt;    
163&gt;  dnl define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')   
164&gt;    
165&gt;  dnl define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')   
166&gt;    
167&gt;  dnl define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')   
168&gt;    
169&gt;  dnl #   
170&gt;    
171&gt;  dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's   
172&gt;    
173&gt;  dnl # slapd, which requires the file to be readble by group ldap   
174&gt;    
175&gt;  dnl #   
176&gt;    
177&gt;  dnl define(`confDONT_BLAME_SENDMAIL',`groupreadablekeyfile')dnl   
178&gt;    
179&gt;  dnl #   
180&gt;    
181&gt;  dnl define(`confTO_QUEUEWARN', `4h')dnl   
182&gt;    
183&gt;  dnl define(`confTO_QUEUERETURN', `5d')dnl   
184&gt;    
185&gt;  dnl define(`confQUEUE_LA', `12')dnl   
186&gt;    
187&gt;  dnl define(`confREFUSE_LA', `18')dnl   
188&gt;    
189&gt;  define(`confTO_IDENT', `0')dnl   
190&gt;    
191&gt;  dnl FEATURE(delay_checks)dnl   
192&gt;    
193&gt;  FEATURE(`no_default_msa',`dnl')dnl   
194&gt;    
195&gt;  FEATURE(`smrsh',`/usr/sbin/smrsh')dnl   
196&gt;    
197&gt;  FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl   
198&gt;    
199&gt;  FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl   
200&gt;    
201&gt;  FEATURE(redirect)dnl   
202&gt;    
203&gt;  FEATURE(always_add_domain)dnl   
204&gt;    
205&gt;  FEATURE(use_cw_file)dnl   
206&gt;    
207&gt;  FEATURE(use_ct_file)dnl   
208&gt;    
209&gt;  dnl #   
210&gt;    
211&gt;  dnl # The -t option will retry delivery if e.g. the user runs over his quota.   
212&gt;    
213&gt;  dnl #   
214&gt;    
215&gt;  FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl   
216&gt;    
217&gt;  FEATURE(`access_db',`hash -T<tmpf> -o /etc/mail/access.db')dnl   
218&gt;    
219&gt;  FEATURE(`blacklist_recipients')dnl   
220&gt;    
221&gt;  EXPOSED_USER(`root')dnl   
222&gt;    
223&gt;  dnl #   
224&gt;    
225&gt;  dnl # The following causes sendmail to only listen on the IPv4 loopback address   
226&gt;    
227&gt;  dnl # 127.0.0.1 and not on any other network devices. Remove the loopback   
228&gt;    
229&gt;  dnl # address restriction to accept email from the internet or intranet.   
230&gt;    
231&gt;  dnl #   
232&gt;    
233&gt;  dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl   
234&gt;    
235&gt;  DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl   
236&gt;    
237&gt;  dnl #   
238&gt;    
239&gt;  dnl # The following causes sendmail to additionally listen to port 587 for   
240&gt;    
241&gt;  dnl # mail from MUAs that authenticate. Roaming users who can't reach their   
242&gt;    
243&gt;  dnl # preferred sendmail daemon due to port 25 being blocked or redirected find   
244&gt;    
245&gt;  dnl # this useful.   
246&gt;    
247&gt;  dnl #   
248&gt;    
249&gt;  dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl   
250&gt;    
251&gt;  dnl #   
252&gt;    
253&gt;  dnl # The following causes sendmail to additionally listen to port 465, but   
254&gt;    
255&gt;  dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed   
256&gt;    
257&gt;  dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't   
258&gt;    
259&gt;  dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS   
260&gt;    
261&gt;  dnl # and doesn't support the deprecated smtps; Evolution &lt;1.1.1 uses smtps   
262&gt;    
263&gt;  dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1.   
264&gt;    
265&gt;  dnl #   
266&gt;    
267&gt;  dnl # For this to work your OpenSSL certificates must be configured.   
268&gt;    
269&gt;  dnl #   
270&gt;    
271&gt;  dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl   
272&gt;    
273&gt;  dnl #   
274&gt;    
275&gt;  dnl # The following causes sendmail to additionally listen on the IPv6 loopback   
276&gt;    
277&gt;  dnl # device. Remove the loopback address restriction listen to the network.   
278&gt;    
279&gt;  dnl #   
280&gt;    
281&gt;  dnl # NOTE: binding both IPv4 and IPv6 daemon to the same port requires   
282&gt;    
283&gt;  dnl # a kernel patch   
284&gt;    
285&gt;  dnl #   
286&gt;    
287&gt;  dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl   
288&gt;    
289&gt;  dnl #   
290&gt;    
291&gt;  dnl # We strongly recommend not accepting unresolvable domains if you want to   
292&gt;    
293&gt;  dnl # protect yourself from spam. However, the laptop and users on computers   
294&gt;    
295&gt;  dnl # that do not have 24x7 DNS do need this.   
296&gt;    
297&gt;  dnl #   
298&gt;    
299&gt;  dnl FEATURE(`accept_unresolvable_domains')dnl   
300&gt;    
301&gt;  FEATURE(`accept_unresolvable_domains')dnl   
302&gt;    
303&gt;  dnl #   
304&gt;    
305&gt;  dnl FEATURE(`relay_based_on_MX')dnl   
306&gt;    
307&gt;  dnl #   
308&gt;    
309&gt;  dnl # Also accept email sent to "localhost.localdomain" as local email.   
310&gt;    
311&gt;  dnl #   
312&gt;    
313&gt;  LOCAL_DOMAIN(`localhost.localdomain')dnl   
314&gt;    
315&gt;  dnl #   
316&gt;    
317&gt;  dnl # The following example makes mail from this host and any additional   
318&gt;    
319&gt;  dnl # specified domains appear to be sent from mydomain.com   
320&gt;    
321&gt;  dnl #   
322&gt;    
323&gt;  dnl MASQUERADE_AS(`mydomain.com')dnl   
324&gt;    
325&gt;  MASQUERADE_AS(`mydomain.com')dnl   
326&gt;    
327&gt;  dnl #   
328&gt;    
329&gt;  dnl # masquerade not just the headers, but the envelope as well   
330&gt;    
331&gt;  dnl #   
332&gt;    
333&gt;  dnl FEATURE(masquerade_envelope)dnl   
334&gt;    
335&gt;  dnl #   
336&gt;    
337&gt;  dn</tmpf></yancy_zhang@sohu.com>