From owner-freebsd-questions  Mon Jan  5 11:12:02 1998
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id LAA01664
          for questions-outgoing; Mon, 5 Jan 1998 11:12:02 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from horton.iaces.com (horton.iaces.com [204.147.87.98])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id LAA01644
          for <freebsd-questions@FreeBSD.ORG>; Mon, 5 Jan 1998 11:12:00 -0800 (PST)
          (envelope-from proot@horton.iaces.com)
Received: (from proot@localhost)
	by horton.iaces.com (8.8.7/8.8.7) id NAA26147;
	Mon, 5 Jan 1998 13:11:48 -0600 (CST)
From: "Paul T. Root" <proot@horton.iaces.com>
Message-Id: <199801051911.NAA26147@horton.iaces.com>
Subject: Re: Preventing spam relaying
To: fbsdlist@federation.addy.com (Cliff Addy)
Date: Mon, 5 Jan 1998 13:11:47 -0600 (CST)
Cc: freebsd-questions@FreeBSD.ORG
In-Reply-To: <Pine.BSF.3.95q.980105131551.16014A-100000@federation.addy.com> from Cliff Addy at "Jan 5, 98 01:17:54 pm"
X-Organization: !nterprise Networking Services - ACES
X-Phone: (612) 664-3385
X-Fax: (612) 664-4779
X-Page: (800) SKY-PAGE PIN: 537-7270
X-Address: 600 Stinson Blvd, Fl 1S
X-Address: Minneapolis, MN 55413
X-Mailer: ELM [version 2.4ME+ PL22 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

In a previous message, Cliff Addy said:
> >>   FR-o /etc/sendmail.cR
> >> 
> >>   Scheck_rcpt
> >>   # anything terminating locally is ok
> >>   R< $+ @ $=w >           $@ OK
> >>   R< $+ @ $=R >           $@ OK
> >> 
> >>   # anything originating locally is ok
> >>   R$*                     $: $(dequote "" $&{client_name} $)
> >>   R$=w                    $@ OK
> >>   R$=R                    $@ OK
> >>   R$@                     $@ OK
> >> 
> >>   # anything else is bogus
> >>   R$*                     $#error $: "550 Relaying Denied"
> >
> >You can also just append the rules themselves to your existing .cf
> 
> I tried this, but it seems to have no effect at all.  We are still being
> abused as a relay.  Don't I need to put these rules within some particular
> ruleset?

check_rcpt is the rule set. A couple of things to check:
1) Does /etc/sendmail.cR exist? It should contain a list of machines
that you wish to allow relaying from/to. It doesn't do wild cards
unfortunately.

2) When you put this ruleset in, did you cut/paste or type it? You
*MUST* have tabs (not spaces) between the LH (R< $+ @ $=w >) and the
RH ($@ OK).

3) After you put this in, did you kill and restart sendmail?

-- 
Q: What's the difference between a catfish and a lawyer?
A: One's an ugly bottom-feeding scum-sucker, and the other's just a fish.