Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Feb 2009 11:12:18 -0500
From:      Janos Dohanics <web@3dresearch.com>
To:        Kirk Strauser <kirk@strauser.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Disabling inbound email in a jail
Message-ID:  <200902271112.18992.web@3dresearch.com>
In-Reply-To: <200902270949.22494.kirk@strauser.com>
References:  <200902270949.22494.kirk@strauser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Friday 27 February 2009 10:49:22 am Kirk Strauser wrote:
> I only want sendmail in a jail to do one thing: forward nightly reports
> from root@localhost to a real account on another machine.  What's the
> proper way to configure this?  By default, sendmail_enable="NO" in
> /etc/rc.conf still gives a running sendmail that accepts mail from other
> hosts:
>
> me@realhost$ echo foo | mail me@jail.example.com
>
> me@jail.example.com$ tail -f /var/log/maillog
> Feb 27 09:43:37 jail.example.com sm-mta[86832]: n1RFhbBp086832:
> from=<me@realhost>, size=735, class=0, nrcpts=1,
> msgid=<20090227154335.877A442071@realhost>, bodytype=7BIT, proto=ESMTP,
> daemon=Daemon0, relay=jail.example.com [10.0.5.70]
> Feb 27 09:43:37 jail.example.com sm-mta[86833]: n1RFhbBp086832:
> to=<me@jail.example.com>, delay=00:00:00, xdelay=00:00:00, mailer=local,
> pri=30983, relay=local, dsn=2.0.0, stat=Sent
>
> However, if I set sendmail_enable="NONE", then I can't send outbound email
> either:
>
> me@jail.example.com$ echo foo | mail me@realhost
> me@jail.example.com$ tail -f /var/log/maillog
> Feb 27 09:37:37 jail.example.com sendmail[86513]: n1RFbbg3086513: from=me,
> size=28, class=0, nrcpts=1,
> msgid=<200902271537.n1RFbbg3086513@jail.example.com>, relay=me@localhost
> Feb 27 09:37:37 jail.example.com sendmail[86513]: n1RFbbg3086513:
> to=me@realhost, ctladdr=me (1001/1001), delay=00:00:00, xdelay=00:00:00,
> mailer=relay, pri=30028, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0,
> stat=Deferred: Connection refused by [127.0.0.1]
>
> What's the happy medium between "sendmail wide open" (eg
> sendmail_enable="NO" (WTF?)) and "disabled mail system" (eg
> sendmail_enable="NONE")?

You might want to disable sendmail and use mail/ssmtp - it's meant for 
scenarios just like yours.

-- 
Janos Dohanics



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200902271112.18992.web>