I'm going to be migrating sendmail from an antique unsupported linux
VPS to a shiny new one. Any linux distros I should look for or avoid?
Since I am a lazy programmer I would like one where I can install
the standard packages ahd have a reasonably up to date sendmail I
can tweak. It's in a private cloud and I don't think they have
strong opnions about which ones they support.

If it matters, it's sending a fairly high volume of notifications,
about a million and a half a day, outgoing only. (No, it's not spam,
it's all "log in and look at this thing you asked us to tell you
about.")

--
Regards,
John Levine, johnl@taugh.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. https://jl.ly

John Levine <johnl@taugh.com> wrote:
> I'm going to be migrating sendmail from an antique unsupported linux
> VPS to a shiny new one. Any linux distros I should look for or avoid?

Slackware 15.0 moved to use procmail by default, *but*
on the DVD you can still install and activate sendmail
from the extra directory. Ver 15 uses sendmail 8.17.1.

Slackware 14.2, still supported, uses snedmail by default.

> Since I am a lazy programmer I would like one where I can install
> the standard packages ahd have a reasonably up to date sendmail I
> can tweak. It's in a private cloud and I don't think they have
> strong opnions about which ones they support.

Slackware usually sticks to vanilla settings in packages.

> If it matters, it's sending a fairly high volume of notifications,
> about a million and a half a day, outgoing only. (No, it's not spam,
> it's all "log in and look at this thing you asked us to tell you
> about.")

Should not matter, but it has been a while since I looked
at other distros. AFAIK most distros moved away from
sendmail.

FWIW, you can get iso images from:

https://mirrors.slackware.com/slackware/slackware-iso/

Good Luck
John

--
[t]csh(1) - "An elegant shell, for a more... civilized age."
- Paraphrasing Star Wars

According to John McCue <jmclnx@SPAMisBADgmail.com>:
>John Levine <johnl@taugh.com> wrote:
>> I'm going to be migrating sendmail from an antique unsupported linux
>> VPS to a shiny new one. Any linux distros I should look for or avoid?
>
>Slackware 15.0 moved to use procmail by default, *but*
>on the DVD you can still install and activate sendmail
>from the extra directory. Ver 15 uses sendmail 8.17.1.

Do you mean procmail or postfix? Procmail is a delivery agent
used with either postfix or sendmail.

>Slackware usually sticks to vanilla settings in packages.

OK, tnx.

--
Regards,
John Levine, johnl@taugh.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. https://jl.ly

John Levine <johnl@taugh.com> wrote:
> According to John McCue <jmclnx@SPAMisBADgmail.com>:
>>John Levine <johnl@taugh.com> wrote:

<snip>

> Do you mean procmail or postfix? Procmail is a delivery agent
> used with either postfix or sendmail.

I mean postfix, was a cut/pase issue :)

>>Slackware usually sticks to vanilla settings in packages.
>
> OK, tnx.
>

--
[t]csh(1) - "An elegant shell, for a more... civilized age."
- Paraphrasing Star Wars

On 5/22/23 22:06, John Levine wrote:
> I'm going to be migrating sendmail from an antique unsupported linux
> VPS to a shiny new one. Any linux distros I should look for or avoid?

Any of the standard distributions should work, sendmail will not be by
default installed, but an apt/yum install sendmail would remediate the
issue.

I tend to follow what the company mainly uses, this keeps things simpler
for the others as they will be more used to the distro and understands
how to work with it.

--
//Aho

On Monday, May 22, 2023 at 4:08:20 PM UTC-4, John Levine wrote:
> I'm going to be migrating sendmail from an antique unsupported linux
> VPS to a shiny new one. Any linux distros I should look for or avoid?
> Since I am a lazy programmer I would like one where I can install
> the standard packages ahd have a reasonably up to date sendmail I
> can tweak. It's in a private cloud and I don't think they have
> strong opnions about which ones they support.
>
Debian 12 comes out soon ( https://release.debian.org/ ) and comes with Sendmail 8.17.x ( https://packages.debian.org/bookworm/sendmail ).

-Jonathan

Am 23.05.2023 um 10:50:22 Uhr schrieb Jonathan Siegle:

> Debian 12 comes out soon ( https://release.debian.org/ ) and comes
> with Sendmail 8.17.x ( https://packages.debian.org/bookworm/sendmail
> ).

8.17.1.9 is in 12, snapshot versions are usually not being
published in Debian repositories and 8.17.2 isn't out yet.

John Levine <johnl@taugh.com> wrote:
> According to John McCue <jmclnx@SPAMisBADgmail.com>:
>>John Levine <johnl@taugh.com> wrote:

<snip>

> Do you mean procmail or postfix? Procmail is a delivery agent
> used with either postfix or sendmail.

I mean postfix, was a cut/pase issue :)

>>Slackware usually sticks to vanilla settings in packages.
>
> OK, tnx.
>

--
[t]csh(1) - "An elegant shell, for a more... civilized age."
- Paraphrasing Star Wars
. X-Received: by 2002:a37:4607:0:b0:760:8f5a:e927 with SMTP id t7-20020a374607000000b007608f5ae927mr706520qka.6.1686635675031;
Mon, 12 Jun 2023 22:54:35 -0700 (PDT)
X-Received: by 2002:ac8:5ac9:0:b0:3f8:6bf6:7407 with SMTP id
d9-20020ac85ac9000000b003f86bf67407mr3783861qtd.11.1686635674779; Mon, 12 Jun
2023 22:54:34 -0700 (PDT)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.mail.sendmail
Date: Mon, 12 Jun 2023 22:54:34 -0700 (PDT)
In-Reply-To: <5edb5c0c-c843-4bcc-bc5a-c3a791ebede4n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=209.6.28.22; posting-account=W1NlGgoAAABT7cu0nJ0MQR1GnY0NxRye
NNTP-Posting-Host: 209.6.28.22
References: <959130d2-b039-4d0b-b698-8058ea48135dn@googlegroups.com>
<u67nre$edn$1@news.misty.com> <5edb5c0c-c843-4bcc-bc5a-c3a791ebede4n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <c0c4dddb-9f37-4a70-b697-9baf80719602n@googlegroups.com>
Subject: Re: Accepting emails without name resolution of incoming host.
From: "markr...@gmail.com" <markrlondon@gmail.com>
Injection-Date: Tue, 13 Jun 2023 05:54:35 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 4730
Xref: retrobbs comp.mail.sendmail:866

I found my solution. I had to use this command to add my virtualtable hos=
ts. to be domains I wanted canonified,.

Why is everything so hard~

CANONIFY_DOMAIN(`list of domains')

On Monday, June 12, 2023 at 4:00:35=E2=80=AFPM UTC-4, markr...@gmail.com wr=
ote:
> I did some more searching. accept_unresolvable_domains only applies to th=
e MAIL FROM address in SMTP, Not the From: address in the actual email addr=
ess. A subtle difference that has tripped people up:=20
>=20
> https://forums.freebsd.org/threads/sendmail-throwing-aaa-bbb-deferred-nam=
e-server-xxx-host-name-lookup-failure.70549/ So they recommend the nocanoni=
fy feature.=20
>=20
> But I don't know why when I turn that on, it breaks my virtualtable rule.=
It's some sort of hack that I don't understand, for mailman 3 to talk to s=
endmail using LMTP., which is above my pay level.=20
>=20
> I get error messages >>> RCPT To <f...@list.psfc.mit.edu.private> <<< 550=
Requested action not taken: mailbox unavailable 550 5.1.1 <f...@list.psfc.=
mit.edu>... User unknown I need to look at this more.=20
>=20
> virtualtable:=20
>=20
> @lists.psfc.mit.edu %1%3...@list.psfc.mit.edu.private=20
>=20
> mailertable:=20
> list.psfc.mit.edu.private mm3lmtp:[localhost]=20
>=20
> Then in sendmail.mc, I need this rule, for Mailman 3 to talk to sendmail.=
=20
>=20
> MAILER_DEFINITIONS=20
> Mmm3lmtp, P=3D[IPC], F=3DPSXmnz9, S=3DEnvFromSMTP/HdrFromSMTP,=20
> R=3DEnvToMM3, E=3D\r\n, L=3D1024,=20
> A=3DTCP $h 8024=20
>=20
> LOCAL_RULESETS=20
> SEnvToMM3=20
> R$+ $: $>EnvToSMTP $1=20
> R$+ < @ list . psfc . mit . edu . private > $* $: $1 < @ list . psfc . mi=
t . edu . > $2
> On Monday, June 12, 2023 at 2:23:45=E2=80=AFPM UTC-4, Claus A=C3=9Fmann w=
rote:=20
> > markr...@gmail.com wrote:=20
> >=20
> > > I thought that FEATURE(`accept_unresolvable_domains') would accept an=
y=20
> > > email. Not so.=20
> > It does what the fine documentation claims...=20
> > Normally, MAIL FROM: commands in the SMTP session will be=20
> > refused if the host part of the argument to MAIL FROM:=20
> > cannot be located in the host name service (e.g., an A or=20
> > MX record in DNS).=20
> > > Some emails were still getting stuck. For example, emails from=20
> > > mail.easyspirit.com, which doesn't resolve. Error message in my log=
=20
> > > shows:=20
> >=20
> > > Jun 10 08:54:08 psfcmail2 sm-mta[59026]: 35ACrYZS059024:=20
> > > to=3D<X...@PSFC.MIT.EDU> ... relay=3Dlocalhost, dsn=3D4.4.2, stat=3DD=
eferred:=20
> > > Name server: localhost: host name lookup failure=20
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^=20
> >=20
> > That does not say anything about mail.easyspirit.com=20
> >=20
> > The error message clearly states what is wrong:=20
> > your system is broken - it can't even look up "localhost".=20
> > If you don't have a way to fix this in DNS or /etc/hosts=20
> > (or you have some of those $#%^Q@^ systemd options...)=20
> > then use [127.0.0.1] instead of localhost.=20
> >=20
> > BTW: are you sure your routing of <X...@PSFC.MIT.EDU> is correct?=20
> >=20
> > --=20
> > Note: please read the netiquette before posting. I will almost never=20
> > reply to top-postings which include a full copy of the previous=20
> > article(s) at the end because it's annoying, shows that the poster=20
> > is too lazy to trim his article, and it's wasting the time of all reade=
rs.
. Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!.POSTED.veps.esmtp.org!not-for-mail
From: Claus =?iso-8859-1?Q?A=DFmann?= <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org>
Newsgroups: comp.mail.sendmail
Subject: Re: What options do I have to safely (for spf) forward email to
external server?
Date: Mon, 7 Aug 2023 03:12:44 -0400 (EDT)
Organization: MGT Consulting
Sender: <ml+sendmail(-no-copies-please)@esmtp.org>
Message-ID: <uaq5hb$g4d$1@news.misty.com>
References: <uaobri$2aap0$1@dont-email.me> <uaoml6$2daf5$4@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 7 Aug 2023 07:12:44 -0000 (UTC)
Injection-Info: news.misty.com; posting-host="veps.esmtp.org:155.138.203.148";
logging-data="16525"; mail-complaints-to="abuse@misty.com"
Mail-Copies-To: never
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: ca@x2.esmtp.org (Claus Assmann)
Xref: retrobbs comp.mail.sendmail:866

Marco Moock wrote:

> SPF checks the MAIL FROM: in the SMTP session.
> aliases will only rewrite RCPT TO, so it will result in an SPF fail.

op.*:
2.6.3. List owners
....
List owners also cause the envelope sender
address to be modified. The contents of the owner
alias are used if they point to a single user, oth-
erwise the name of the alias itself is used.

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Marco Moock <mo01@posteo.de>
Newsgroups: comp.mail.sendmail
Subject: avoid sender address checking in virtusertable
Date: Wed, 6 Sep 2023 17:06:16 +0200
Organization: A noiseless patient Spider
Lines: 18
Message-ID: <uda4h8$2hr8j$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 6 Sep 2023 15:06:16 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="609beb283a54061c4d1d71ba9b8c47ee";
logging-data="2682131"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+HzIPwUy8yL8nF6nvz0juV"
Cancel-Lock: sha1:5wlmKhgZE9/EJ/mfhOz+C20EuDM=
Xref: retrobbs comp.mail.sendmail:866

Hello!

I have the hostname of my machine in virtusertable because I only want
special accounts (in Cyrus) receiving mail. This has the side effect
that sending from such an address address is being denied.
I am aware that such messages cannot be bounced, although I want system
users be able to send mail from these addresses.

What is the best way to handle this while keeping
specific@host.domain.com user
@host.domain.com error:...

in virtusertable to avoid backscatter?

--
kind regards
Marco

.
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!.POSTED.veps.esmtp.org!not-for-mail
From: Claus =?iso-8859-1?Q?A=DFmann?= <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org>
Newsgroups: comp.mail.sendmail
Subject: Re: can it be that dnsbl lookups are ignored under some conditions?
Date: Tue, 19 Sep 2023 06:46:58 -0400 (EDT)
Organization: MGT Consulting
Sender: <ml+sendmail(-no-copies-please)@esmtp.org>
Message-ID: <uebu72$44r$1@news.misty.com>
References: <ue70k6$d87e$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 19 Sep 2023 10:46:58 -0000 (UTC)
Injection-Info: news.misty.com; posting-host="veps.esmtp.org:155.138.203.148";
logging-data="4251"; mail-complaints-to="abuse@misty.com"
Mail-Copies-To: never
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: ca@x2.esmtp.org (Claus Assmann)
Xref: retrobbs comp.mail.sendmail:866

On 5/22/23 22:06, John Levine wrote:
> I'm going to be migrating sendmail from an antique unsupported linux
> VPS to a shiny new one. Any linux distros I should look for or avoid?

Any of the standard distributions should work, sendmail will not be by
default installed, but an apt/yum install sendmail would remediate the
issue.

I tend to follow what the company mainly uses, this keeps things simpler
for the others as they will be more used to the distro and understands
how to work with it.

--
//Aho

.
X-Received: by 2002:a05:622a:288:b0:3f8:6bf6:7403 with SMTP id z8-20020a05622a028800b003f86bf67403mr3866410qtw.0.1686635821802;
Mon, 12 Jun 2023 22:57:01 -0700 (PDT)
X-Received: by 2002:ac8:5793:0:b0:3fc:6e47:b1b6 with SMTP id
v19-20020ac85793000000b003fc6e47b1b6mr56895qta.4.1686635821597; Mon, 12 Jun
2023 22:57:01 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.mail.sendmail
Date: Mon, 12 Jun 2023 22:57:01 -0700 (PDT)
In-Reply-To: <u68u0r$3gdh5$1@dont-email.me>
Injection-Info: google-groups.googlegroups.com; posting-host=209.6.28.22; posting-account=W1NlGgoAAABT7cu0nJ0MQR1GnY0NxRye
NNTP-Posting-Host: 209.6.28.22
References: <fc0cbeb9-4fae-4f7d-a13c-0e7f3ca530f4n@googlegroups.com> <u68u0r$3gdh5$1@dont-email.me>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <d8cb6216-704d-4616-b580-29f3eb1a9a9dn@googlegroups.com>
Subject: Re: Rewrite incoming domain to be something elsewhere.
From: "markr...@gmail.com" <markrlondon@gmail.com>
Injection-Date: Tue, 13 Jun 2023 05:57:01 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 1678
Xref: retrobbs comp.mail.sendmail:867

I'll take a look, although I think I found a reason not to need it. Hopef=
ully.

Before I die, maybe I'll be able to figure out sendmail!=20

On Tuesday, June 13, 2023 at 1:15:10=E2=80=AFAM UTC-4, Marco Moock wrote:
> Am 12.06.2023 um 14:49:55 Uhr schrieb markr...@gmail.com:=20
>=20
> > I want all the email address in that local domain, transformed into=20
> > @psfc.mit.edu. Otherwise, I get this email address.
> FEATURE genericstable should be able to do that.
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: None <hzcnjkx656@tormails.com>
Newsgroups: comp.mail.sendmail
Subject: Re: What options do I have to safely (for spf) forward email to
external server?
Date: Mon, 7 Aug 2023 11:56:31 +0200
Organization: A noiseless patient Spider
Lines: 54
Message-ID: <uaqf4g$2qe1c$1@dont-email.me>
References: <uaobri$2aap0$1@dont-email.me> <uaq0qe$b31$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 7 Aug 2023 09:56:32 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="832349e6c5114fdce8830767e573cf5e";
logging-data="2963500"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/d9w8JcMH9tWU3E7PUrM9b5F4FsreReS5mbdB6gj3TZw=="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
Thunderbird/91.5.1
Cancel-Lock: sha1:tylyNMq3ssAd8J2SkNzvDdwtHWc=
Content-Language: en-US
In-Reply-To: <uaq0qe$b31$1@news.misty.com>
Xref: retrobbs comp.mail.sendmail:867

>
>> Is there an option for sendmail to forward replacing test@example.com
>> with test@me.com?
>
> Address rewriting and rulesets are explained in doc/op/op.*
> It might be a bit complicated...
>
> You could also look for "SRS" - there are probably example
> rules available (check your favorite search engine).
>

Thanks! This SRS was indeed the perfect keyword to search for. I
currently have this sort of setup. Where external email is received on a
mx server that relays to local mail server for users to collect their
email.

email

|
|
|
V
+------------+
| MX |
| |
| accessmap |
| |
+------+-----+
|
|
|
+------+-----+
| LOCAL |
| |
| virtuser |
| |
+------------+

1. Ideally (I guess) I would like to have the MX servers check if the
email needs local delivery or forwarded, and if it is externally
forwarded, it should go through the srs milter on the mx servers to the
external server. Or would this be impossible to do here? Maybe only the
LOCAL would be able to forward the message?
(I prefer to use sendmail, and not have lookups done by the milter in eg
mysql)

2. Do you know if the ‘reply to’ in mail clients still use the original
email address, or will this be changed?

[1]
https://github.com/d--j/srs-milter

[2]
http://www.open-spf.org/SRS/
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: kalevi@kolttonen.fi (Kalevi Kolttonen)
Newsgroups: comp.mail.sendmail
Subject: Re: avoid sender address checking in virtusertable
Date: Wed, 6 Sep 2023 15:28:10 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 30
Sender: <untosten@0.0.0.0>
Message-ID: <uda5qa$2i5ke$1@dont-email.me>
References: <uda4h8$2hr8j$1@dont-email.me>
Injection-Date: Wed, 6 Sep 2023 15:28:10 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="fd0ae00a8a3f5bd3a48243c95c626cb4";
logging-data="2692750"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18kSeXdCLEEG0nddoiP1eAr5H2m2L1f6sc="
User-Agent: tin/2.6.2-20221225 ("Pittyvaich") (Linux/6.4.13-200.fc38.x86_64 (x86_64))
Cancel-Lock: sha1:kGwwrk3Q/b9Ib90SuNku0VNY1CY=
Xref: retrobbs comp.mail.sendmail:867

Marco Moock <mo01@posteo.de> wrote:
> I have the hostname of my machine in virtusertable because I only want
> special accounts (in Cyrus) receiving mail. This has the side effect
> that sending from such an address address is being denied.

I am not 100% sure if I understood your problem, but
you can use "From:" prefix in access db keys and
"OK" as a value. See the README examples:

-------- start README.cf -----------------------------

If the required item is looked up in a map, it will be tried first
with the corresponding tag in front, then (as fallback to enable
backward compatibility) without any tag, unless the specific feature
requires a tag. For example,

From:spammer@some.dom REJECT
To:friend.domain RELAY
Connect:friend.domain OK
Connect:from.domain RELAY
From:good@another.dom OK
From:another.dom REJECT

-------- end README.cf -----------------------------

Again, I am not sure whether that will work, but I
guess it is worth trying.

br,
KK
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: None <hzcnjkx656@tormails.com>
Newsgroups: comp.mail.sendmail
Subject: Re: can it be that dnsbl lookups are ignored under some conditions?
Date: Tue, 19 Sep 2023 14:09:51 +0200
Organization: A noiseless patient Spider
Lines: 51
Message-ID: <uec32m$2b8ea$1@dont-email.me>
References: <ue70k6$d87e$1@dont-email.me> <uebu72$44r$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 19 Sep 2023 12:09:58 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="8372ebefb2c876db320d2141aabe218d";
logging-data="2466250"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+0NfjSiTvFCnid8txIwv+NKUBn9666Y8N1gtU+9yWxOA=="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
Thunderbird/102.14.0
Cancel-Lock: sha1:Ms//YEj94P9SwRq1PNyBFwBfEXc=
In-Reply-To: <uebu72$44r$1@news.misty.com>
Content-Language: en-US
Xref: retrobbs comp.mail.sendmail:867

>
>> FEATURE(`enhdnsbl', `zen.spamhaus.org', `"554 Rejected " $&{client_addr}
>> " zen.spamhaus.org"', `t', `127.0.0.3.',`127.0.0.4.')dnl
>
>> Sep 17 15:45:09 sendmail[125009]: STARTTLS=server,
>> relay=122-151-202-217.sta.wbroadband.net.au [122.151.202.217],
>
> Does the blocking work sometimes, never, ... ?
> Some "libraries" mess around with DNS lookups and return bogus
> results in case of timeouts etc - do you have one of those
> systems (systemd and "weird" lookup mechanisms)?
>

On Monday, May 22, 2023 at 4:08:20 PM UTC-4, John Levine wrote:
> I'm going to be migrating sendmail from an antique unsupported linux
> VPS to a shiny new one. Any linux distros I should look for or avoid?
> Since I am a lazy programmer I would like one where I can install
> the standard packages ahd have a reasonably up to date sendmail I
> can tweak. It's in a private cloud and I don't think they have
> strong opnions about which ones they support.
>
Debian 12 comes out soon ( https://release.debian.org/ ) and comes with Sendmail 8.17.x ( https://packages.debian.org/bookworm/sendmail ).

-Jonathan
. X-Received: by 2002:a05:622a:2ca:b0:3f8:4f6:f7b0 with SMTP id a10-20020a05622a02ca00b003f804f6f7b0mr4235871qtx.8.1687168050438;
Mon, 19 Jun 2023 02:47:30 -0700 (PDT)
X-Received: by 2002:ac8:5f8b:0:b0:3f6:b519:9487 with SMTP id
j11-20020ac85f8b000000b003f6b5199487mr3988689qta.7.1687168050152; Mon, 19 Jun
2023 02:47:30 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer01.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.mail.sendmail
Date: Mon, 19 Jun 2023 02:47:29 -0700 (PDT)
Injection-Info: google-groups.googlegroups.com; posting-host 9.6.28.22; posting-account=W1NlGgoAAABT7cu0nJ0MQR1GnY0NxRye
NNTP-Posting-Host: 209.6.28.22
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <21a56e1d-c63c-4d46-9276-d16597455dadn@googlegroups.com>
Subject: Office365 restricting new email server using sendmail.
From: "markr...@gmail.com" <markrlondon@gmail.com>
Injection-Date: Mon, 19 Jun 2023 09:47:30 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 2175
Xref: retrobbs comp.mail.sendmail:868

Hi - I have a brand new email server with sendmail that I'm testing, but it's getting error log messages like "Deferred: 452 4.5.3 Too many recipients (AS780090)" from Office365 servers, even when very few recipients are specified in email. The only thing I've found on the web that perhaps applies is below. Although the people weren't using sendmail.. Could this be my problem? I wonder if I've accidentally turned TLS off. Is there a way to check?

Or might this be a different problem? If no one knows, is there anywhere else I can ask my question? Thanks! - Mark

--------------------------------------------------------------------------------------------------------------------------

The underlying issue appears to be a default security "feature" associated with Office365 that we not extant in Microsoft Exchange.

Apparently mailservers that can't use TLS transport for handshake to Office 365 are limited to a Microsoft default of a single recipient per message to be delivered. That value could be overridden on the *destination* Office365 server,
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: None <hzcnjkx656@tormails.com>
Newsgroups: comp.mail.sendmail
Subject: Re: sendmail 8.17.2 available
Date: Mon, 7 Aug 2023 13:19:12 +0200
Organization: A noiseless patient Spider
Lines: 26
Message-ID: <uaqjvg$2r5th$1@dont-email.me>
References: <u5eu4f$14r$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 7 Aug 2023 11:19:12 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="832349e6c5114fdce8830767e573cf5e";
logging-data="2987953"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18c9xqzJzF8ZZmONDhlQTLp1jJjlDokN14GQiEkCT0h0w=="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
Thunderbird/91.5.1
Cancel-Lock: sha1:QewQudnZGHMYuBFeCBt5Dun/53UIn-Reply-To: <u5eu4f$14r$1@news.misty.com>
Content-Language: en-US
Xref: retrobbs comp.mail.sendmail:868

> Proofpoint, Inc., and the Sendmail Consortium announce the availability
> of sendmail 8.17.2. It fixes several problems, mostly related to EAI
> support. For a complete list see the release notes below.
>
> Please send bug reports and general feedback to one of the addresses
> listed at: http://www.sendmail.org/email-addresses.html
> https://www.proofpoint.com/us/products/email-protection/open-source-email-solution
>
> The version can be found at
>
> https://ftp.sendmail.org/sendmail.8.17.2.tar.gz
> https://ftp.sendmail.org/sendmail.8.17.2.tar.gz.sig
> https://ftp.sendmail.org/sendmail.8.17.2.tar.Z
> https://ftp.sendmail.org/sendmail.8.17.2.tar.Z.sig
>
> (or via ftp://ftp.sendmail.org/pub/sendmail/)
>
> SHA-256 checksums
> SHA256 (sendmail.8.17.2.tar.Z) = 2f9efa63764ca2cd8e89967015564de4a2c5794d7f6cdf2de9f29224069be71c
> SHA256 (sendmail.8.17.2.tar.Z.sig) = 09b47538cc01a8ce918fdd30643e31c23e280202e9abee6c481c1d730e2941a4
> SHA256 (sendmail.8.17.2.tar.gz) = 90f5ae74c35a84808861933ba094201b901b70c6b2903684dcf39bdae8a5a1a2
> SHA256 (sendmail.8.17.2.tar.gz.sig) = bd40723fc4af710c8361ddab30a435a1321c963f52f88b4363776049a2653acc
>

Since what version is SMTPUTF8 supported?
. Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: kalevi@kolttonen.fi (Kalevi Kolttonen)
Newsgroups: comp.mail.sendmail
Subject: Re: avoid sender address checking in virtusertable
Date: Wed, 6 Sep 2023 15:34:10 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 19
Sender: <untosten@0.0.0.0>
Message-ID: <uda65i$2i5pd$1@dont-email.me>
References: <uda4h8$2hr8j$1@dont-email.me> <uda5qa$2i5ke$1@dont-email.me>
Injection-Date: Wed, 6 Sep 2023 15:34:10 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="fd0ae00a8a3f5bd3a48243c95c626cb4";
logging-data="2692909"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+8D9zkk6s9X92TtuSyL2CvqJCp+xbUZxg="
User-Agent: tin/2.6.2-20221225 ("Pittyvaich") (Linux/6.4.13-200.fc38.x86_64 (x86_64))
Cancel-Lock: sha1:DcHMnxpQUk0TWrNbMjIpvWKLqLUXref: retrobbs comp.mail.sendmail:868

Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:
> Marco Moock <mo01@posteo.de> wrote:
>> I have the hostname of my machine in virtusertable because I only want
>> special accounts (in Cyrus) receiving mail. This has the side effect
>> that sending from such an address address is being denied.
>
> I am not 100% sure if I understood your problem,

My another take at this, but still I am not sure what you
are trying to achieve. Do you want to use those Cyrus addresses
as envelope senders? If so, you can probably try "genericstable" to
reverse map your Cyrus addresses to working addresses.

See README:

FEATURE(`genericstable')

br,
KK
. Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!.POSTED.veps.esmtp.org!not-for-mail
From: Claus =?iso-8859-1?Q?A�mann?= <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org>
Newsgroups: comp.mail.sendmail
Subject: Re: can it be that dnsbl lookups are ignored under some conditions?
Date: Tue, 19 Sep 2023 13:12:25 -0400 (EDT)
Organization: MGT Consulting
Sender: <ml+sendmail(-no-copies-please)@esmtp.org>
Message-ID: <ueckpp$uhv$1@news.misty.com>
References: <ue70k6$d87e$1@dont-email.me> <uebu72$44r$1@news.misty.com> <uec32m$2b8ea$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 19 Sep 2023 17:12:25 -0000 (UTC)
Injection-Info: news.misty.com; posting-host="veps.esmtp.org:155.138.203.148";
logging-data="31295"; mail-complaints-to="abuse@misty.com"
Mail-Copies-To: never
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: ca@x2.esmtp.org (Claus Assmann)
Xref: retrobbs comp.mail.sendmail:868

None wrote:

> I am wondering if there is a relationship between this waiting of the
> client issuing more smtp commands and sendmail 'flushing' the dnsbl
> lookup. Or maybe it flushes when STARTTLS is requested?

The DNSBL lookups are done before a process to accept the connection
is started and the result of the check_relay ruleset is passed
to the "smtp" process.
So the only way this can "fail" is if something goes wrong with
the DNS lookup.
As mentioned some "DNS" lookup code in C libraries is broken
returning bogus results.
You could turn on some debugging (-D /tmp/dns.log -d38.40)
or increase the LogLevel to at least 10
to get more info about lookups done via a "dns" map.
That is probably the best way to track down the problem.

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.
.
Click here to read the complete article

Am 23.05.2023 um 10:50:22 Uhr schrieb Jonathan Siegle:

> Debian 12 comes out soon ( https://release.debian.org/ ) and comes
> with Sendmail 8.17.x ( https://packages.debian.org/bookworm/sendmail
> ).

8.17.1.9 is in 12, snapshot versions are usually not being
published in Debian repositories and 8.17.2 isn't out yet.

.
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Marco Moock <mo01@posteo.de>
Newsgroups: comp.mail.sendmail
Subject: Re: Office365 restricting new email server using sendmail.
Date: Mon, 19 Jun 2023 12:15:49 +0200
Organization: A noiseless patient Spider
Lines: 10
Message-ID: <u6p9sl$21ose$1@dont-email.me>
References: <21a56e1d-c63c-4d46-9276-d16597455dadn@googlegroups.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 19 Jun 2023 10:15:49 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="3f3aa2567673a9f1ab2e083004d48d0b";
logging-data="2155406"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19R3tWJvIJIpMOiMzbeUmyC"
Cancel-Lock: sha1:WzHGgz3V6YYpIC4D1NC/5lWmuu0=
Xref: retrobbs comp.mail.sendmail:869

Am 19.06.2023 um 02:47:29 Uhr schrieb markr...@gmail.com:

> Hi - I have a brand new email server with sendmail that I'm testing,
> but it's getting error log messages like "Deferred: 452 4.5.3 Too
> many recipients (AS780090)" from Office365 servers, even when very
> few recipients are specified in email.

It is possible to reduce the amount of recipients in sendmail.
https://www.oreilly.com/library/view/sendmail-4th-edition/9780596510299/ch20s05s14.html

.
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Marco Moock <mo01@posteo.de>
Newsgroups: comp.mail.sendmail
Subject: Re: sendmail 8.17.2 available
Date: Mon, 7 Aug 2023 15:16:50 +0200
Organization: A noiseless patient Spider
Lines: 9
Message-ID: <uaqqs2$2s2vj$2@dont-email.me>
References: <u5eu4f$14r$1@news.misty.com>
<uaqjvg$2r5th$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Date: Mon, 7 Aug 2023 13:16:50 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="62c4e0a3c636c5235d9c948fb19c1b3d";
logging-data="3017715"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+JJFq6pOsgGh6GsBFgR649"
Cancel-Lock: sha1:GkJxANAsDIoN58kZFRHVwU27G18=
Xref: retrobbs comp.mail.sendmail:869

Am 07.08.2023 um 13:19:12 Uhr schrieb None:

> Since what version is SMTPUTF8 supported?

ftp://ftp.sendmail.org/pub/sendmail/RELEASE_NOTES

8.17.1/8.17.1 2021/08/17
Experimental support for SMTPUTF8 (EAI, see RFC 6530-6533)

.
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Marco Moock <mo01@posteo.de>
Newsgroups: comp.mail.sendmail
Subject: Re: avoid sender address checking in virtusertable
Date: Wed, 6 Sep 2023 17:51:24 +0200
Organization: A noiseless patient Spider
Lines: 16
Message-ID: <uda75s$2hr8j$6@dont-email.me>
References: <uda4h8$2hr8j$1@dont-email.me>
<uda5qa$2i5ke$1@dont-email.me>
<uda65i$2i5pd$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Date: Wed, 6 Sep 2023 15:51:24 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="609beb283a54061c4d1d71ba9b8c47ee";
logging-data="2682131"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18cN3ZhZz6KktXStjUMPuDC"
Cancel-Lock: sha1:Kc9h0ZT2jApTmdbuDBWSjYQITgw=
Xref: retrobbs comp.mail.sendmail:869

Am 06.09.2023 um 15:34:10 Uhr schrieb Kalevi Kolttonen:

> My another take at this, but still I am not sure what you
> are trying to achieve. Do you want to use those Cyrus addresses
> as envelope senders? If so, you can probably try "genericstable" to
> reverse map your Cyrus addresses to working addresses.

Yes, these addresses are envelope addresses, but the mailboxes don't
exist in Cyrus (I also don't need them there).

For example: A service running under the user ftp wants to send an email
to root, it would be rejected.

I will check if accessdb is right for that situation, thanks for that
suggestion, it wasn't on my radar.

.
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: None <hzcnjkx656@tormails.com>
Newsgroups: comp.mail.sendmail
Subject: Re: can it be that dnsbl lookups are ignored under some conditions?
Date: Tue, 19 Sep 2023 22:00:49 +0200
Organization: A noiseless patient Spider
Lines: 73
Message-ID: <ueculo$2go2v$1@dont-email.me>
References: <ue70k6$d87e$1@dont-email.me> <uebu72$44r$1@news.misty.com>
<uec32m$2b8ea$1@dont-email.me> <ueckpp$uhv$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 19 Sep 2023 20:00:56 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="8372ebefb2c876db320d2141aabe218d";
logging-data="2646111"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18r9kt7yubbkVbKaD6HSfeOEb+R/oforYmhVzUfgt/ZnA=="
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
Thunderbird/102.14.0
Cancel-Lock: sha1:vNv99JND+3EGY4cGqOc+6Nd8oW0=
In-Reply-To: <ueckpp$uhv$1@news.misty.com>
Content-Language: en-US
Xref: retrobbs comp.mail.sendmail:869

On 19/09/2023 19:12, Claus Aßmann wrote:
> None wrote:
>
>> I am wondering if there is a relationship between this waiting of the
>> client issuing more smtp commands and sendmail 'flushing' the dnsbl
>> lookup. Or maybe it flushes when STARTTLS is requested?
>
> The DNSBL lookups are done before a process to accept the connection
> is started and the result of the check_relay ruleset is passed
> to the "smtp" process.
> So the only way this can "fail" is if something goes wrong with
> the DNS lookup.
> As mentioned some "DNS" lookup code in C libraries is broken
> returning bogus results.
> You could turn on some debugging (-D /tmp/dns.log -d38.40)
> or increase the LogLevel to at least 10
> to get more info about lookups done via a "dns" map.
> That is probably the best way to track down the problem.
>

What about if multiple A records are returned by spamhaus? This is with
more logging. You can see it works only with the 127.0.0.11, and below
is the complete output with 3 records.

Sep 19 21:32:13 out2 sendmail[152710]: NOQUEUE: connect from
[149.113.65.182]
Sep 19 21:32:13 out2 sendmail[152710]: NOQUEUE: dns
182.65.113.149.zen.spamhaus.org. => 127.0.0.11

Sep 19 21:32:16 sendmail[152710]: 38JJWDsu152710: <-- AUTH LOGIN
Sep 19 21:32:16 sendmail[152710]: 38JJWDsu152710: --- 334 VXNlcm5hbWU6
Sep 19 21:32:17 sendmail[152710]: 38JJWDsu152710: --- 334 UGFzc3dvcmQ6
Sep 19 21:32:20 sendmail[152710]: 38JJWDsu152710: --- 535 5.7.0
authentication failed
Sep 19 21:32:20 sendmail[152710]: 38JJWDsu152710: AUTH failure (LOGIN):
authentication failure (-13) SASL(-13): authentication failure:
checkpass failed, user=info@matthijsvanheijningen.com,
relay=[149.113.65.182]

[@log]# testrbl.sh 149.113.65.182
149.113.65.182 (182.65.113.149)
zen.spamhaus.org 127.0.0.4,127.0.0.3,127.0.0.11
"https://www.spamhaus.org/sbl/query/SBLCSS"
"https://www.spamhaus.org/query/ip/149.113.65.182"
bl.spamcop.net
dul.rbl-dns.com

[@log]# testrbl.sh 149.113.65.182
149.113.65.182 (182.65.113.149)
zen.spamhaus.org 127.0.0.3,127.0.0.11,127.0.0.4
"https://www.spamhaus.org/query/ip/149.113.65.182"
"https://www.spamhaus.org/sbl/query/SBLCSS"
bl.spamcop.net
dul.rbl-dns.com

[@log]# testrbl.sh 149.113.65.182
149.113.65.182 (182.65.113.149)
zen.spamhaus.org 127.0.0.11,127.0.0.4,127.0.0.3
"https://www.spamhaus.org/sbl/query/SBLCSS"
"https://www.spamhaus.org/query/ip/149.113.65.182"
bl.spamcop.net
dul.rbl-dns.com

.
Path: i2pn2.org!rocksolid2!news.neodome.net!weretis.net!feeder8.news.weretis.net!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: candycanearter07 <no@thanks.net>
Newsgroups: news.admin.net-abuse.usenet,news.software.nntp,comp.lang.c,news.admin.peering,comp.mail.sendmail
Subject: Re: UDP Google GRoups
Date: Sun, 8 Oct 2023 00:45:14 -0500
Organization: A noiseless patient Spider
Lines: 14
Message-ID: <uftfla$2m48l$2@dont-email.me>
References: <uda1ti$7qs$51@gallifrey.nk.ca> <ufqmqd$1vve7$9@dont-email.me>
<ufro03$1as7$25@gallifrey.nk.ca> <ufsiec$2igm6$7@dont-email.me>
<ufss5q$1kht$10@gallifrey.nk.ca>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 8 Oct 2023 05:45:14 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="0f9ed7954820e4bc4412baa00edd3bf1";
logging-data="2822421"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18KUViurDYv5BOBDlSd7PVPA4H2rsS27GwWrdkvFT+VNQ=="
User-Agent: Betterbird (Linux)
Cancel-Lock: sha1:1faHx10xklNYakrXoF2Or0ElOJw=
In-Reply-To: <ufss5q$1kht$10@gallifrey.nk.ca>
Content-Language: en-US
Xref: retrobbs news.admin.net-abuse.usenet:2379 news.software.nntp:2397 comp.lang.c:31670 news.admin.peering:894 comp.mail.sendmail:869