Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 May 2002 08:13:14 -0600
From:      "Jason Christians" <jasonc@sdln.net>
To:        <freebsd-questions@FreeBSD.ORG>
Subject:   Firewalls, Sendmail, and Bind DNS!  Oh my!
Message-ID:  <AJEHKIHHAKDJGCMIKPEIAEMBCFAA.jasonc@sdln.net>

next in thread | raw e-mail | index | archive | help
I have a strange issue that I have been researching for a while:

My email server (Sendmail 8, Bind 9, FreeBSD 4.4) where I work is able to
send emails to almost all of the domains out there.  Of the domains I am
unable to send to, this is the error in the sendmail log file: (note that I
changed the email address)

reject=451 4.1.8 <email@domain.edu>... Domain of sender address
email@domain.edu does not resolve

We have a PIX firewall, but the issues existed before and after the PIX
firewall.  We took it offline, and the mail was still deferred.  I have
traced this to the fact that we are unable to nslookup on their mx records,
while other networks do not have a problem with either the mail or the
nslookup, only us.  They are all using checkpoint firewalls.  I am guessing
it is something specific to that firewall.

To get around this issue, I decided that maybe adding the following to the
sendmail.mc file would give me a temp work-around until we figure out the
dns issue.

FEATURE(accept_unresolvable_domains)

I tried using the m4 processor, but I got a bogus cf file.  Here is the
command I used:

m4 /etc/mail/freebsd.mc > /etc/freebsd.cf

What did I do wrong?  And, more importantly, will adding that macro help
anyway?  Any other ideas on this would be most appreciated.  Any ideas on
why I would be unable to do nslookups while I can "lserver" to another dns
server and from there get the nslookup to work?

Thanks in advance,
Jason
**************************************
Jason Christians
South Dakota Library Network
Senior Computer Specialist
jasonc@sdln.net / http://www.sdln.net
**************************************


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AJEHKIHHAKDJGCMIKPEIAEMBCFAA.jasonc>