I'm working with a vendor on getting a web site certified for Payment Card Industry Data Security Standard for processing our credit card transactions. The vendor's running Centos 5 (which we also run at my business). The current issue has to do with sendmail, which the required PCI security scans say should be upgraded to 8.14.4. However, the vendor points out that latest version packaged for yum on Centos 5 is 8.13.8.
I'm still somewhat of a newbie at this, but from my reading, it seems that installing the 8.14.4 sendmail means using 3rd party repositories and potentially breaking the system. I browsed through "Installing RPMforge" on Centos wiki, which notes that a complete listing of the over 4000 RPMforge packages is at [URL]. Scanning that link shows sendmail packages with lower numbers than what's currently installed, 8.13.8. All I see on sendmail.org are tarballs of the latest verson, 8.14.4, available 2009-12-30. I presume this means you must install from source; I'm not sure the vendor's comfortable with this, especially for such an essential service.
After upgrading to CentOS 5.3 my sendmail will no longer deliver messages using a program in my /etc/smrsh. It fails with the message "unknown mailer error 1". This program was working perfectly before I did the upgrade using yum. Here is the list of packages that were upgraded. Does anything jump out as being the source of the issue? I don't believe that sendmail itself was upgraded:
There is no "security" forum so I figured I'd post this here.
Because of PCI compliance requirements, we are going to begin using the built-in audit utility that comes with SuSE to monitor file/directory changes. The utility comes pre-configured to monitor many system files but I was curious as if there is a standard list of files/folders that should be monitored for PCI compliance? I've scanned the web but haven't come across anything yet.
Basically, out of the box, is SUSE hardened to meet DISA STIG compliance? along with the question came a 500 page UNIX Security checklist I am not looking forward to reading through nor typing 5000 commands.
I'm contemplating to switch from sendmail to postfix. My current setup is very simple: a minimal CentOS 5.5 64bits install with Selinux enabled on ports 25, 80, secret sshd, 53 and 953. I also use Google Apps for my domain to manage the email accounts. Basically, I use sendmail only to email the daily logwatch, as well the email sent from my forum software. The issue that I'm facing is the forum is starting to hammer sendmail with a lot of emails.
My goal is to use Postfix only to send those forum emails. I don't need a SMTP setup, that is handled by Google Apps. Can I do that with Postfix? Will Postfix perform better than sendmail? All guides I saw on internet pair Postfix with Dovecot and the setup is a little complex, not to mention that I will never have email accounts created on server.
I was wondering if you have any handy guide who will basically replace sendmail with Postfix. Personally, I tried myself using the CentOS HowTo. I yum'ed postfix and system-switch-mail, then I disabled sendmail and switched the agent to Postfix. I left the main.cf config unchanged and tried to start Postfix (service postfix start), but I got a "master is stopped" message when I checked the daemon status.
I already have sendmail dovecot and roundcube webmail in my linux centos 5.6Problem is that i want to change mailbox format mbox to maildir because maildir is faster and stable.So i search about this and i see sendmail doesnt save in maildir format.Is there any way to change sendmail save format mbox to maildir.Or do u have any idea for it.
I'm running CentOS 5.4 with sendmail. My computer hostname is bob.domain.com. Whenever I would nc -v 127.0.0.1 25 into sendmail I would get bob.domain.com on the banner. Whenever I send out email the emails would be user@bob.domain.com. I wanted the email to show up as user@domain.com. So in the etc/mail/sendmail.cf file I changed the line
Code: Dj$w.hostname.com to this
Code: Djhostname.com Now when I enter sendmail I see domain.com in the banner so I know the change took place. However, when I send email using
Code: mail -s "test" xxx@xxx.com then email still goes out as user@bob.domain.com. What other changes do I need to make?
We have moved from a Windows based SMTP server to Sendmail on Cent 5.5. We have a special application that was written to look at the "BadMail" folder on the Windows box. I am told by my developers that it is capable of monitor remote locations and they just need to know the format or extension of the badmail files.
My question is what is the default location of the badmail folder in Sendmail? This is a default install from CentOS.
I recently turned on sendmail in CentOS 5.2 and configured it to relay mail for its domain onto some other email account elsewhere. Anyway, it's kind of hit and miss, but I've got a few of these:
Jan 27 21:47:18 smhi sendmail[12176]: n0S3YLaX011994: to=<kevin@hiding.my.domain.com >, delay=00:12:56, xdelay=00:00:03, mailer=esmtp, pri=120673, relay=mx.hiding.my.mailrelay.com [65.87.230.26], dsn=4.0.0, stat=Deferred: 451 4.3.0 Greylisting is active, please try again later.
I don't think I have any greylisting software installed, but it seems to be greylisting? What's up with that? And why would it be intermittent? how I turn this off?
I've previously configured sendmail on Fedora systems and CentOS 4 and haven't run into this before...
I am trying to make my webserver a well respected email sender and it appears to me that using DKIM is something I need to do.
I have no experience with this and would like to know if anyone thinks there are issues that I should be aware of before going down this path.
Also, I have not been able to find any good, STEP BY STEP, documentation on how to set up DKIM with Sendmail.
I am also not sure if you need a certain network configuration for DKIM to work...this is what I am working with:
My webserver (centos 5.3, sendmail 8.13.8) sends outgoing mail and has a valid reverse DNS that matches a forward DNS. The MX records for my webserver's domain point to a third party email provider who handles the incoming mail for that domain. I added an spf record that signifies it that my webserver is authorized to send mail for mydomain.
I have been trying to get procmail working on CentOS 5.2. I don't need anything fancy, just an auto reply for a "noreply@" account. Looking at the sendmail configuration, it appears procmail is the MDA. I have looked at many different tutorials and how-tos, but most are old, and/or the locations/paths and setups are markedly different from the defaults on my system. Can anyone recommend a good CentOS-based tutorial on Procmail w/ recipes? (I have an RHEL book and it's no help either.) Thank you for your time and consideration.
We have CentOS 5.3 and are using sendmail for outbound emails. We are trying to switch over to authsmtp service. Authsmtp requires sendmail built with SASL suport.
How do I find out if my sendmail has been built with SASL support? If it is not, is it easy to build it with SASL support?
Sendmail does not work anymore. //deinstaled everything [root@localhost ~]# top -b -n1 | mail -s 'Process snapshot' mymail@mymail.net /usr/sbin/sendmail: No such file or directory
//reinstaled everything, restart sendmail [root@localhost ~]# top -b -n1 | mail -s 'Process snapshot' mymail@mymail.net [root@localhost ~]# /etc/mail/submit.cf: line 544: fileclass: cannot open '/etc/mail/trusted-users': World writable directory //fixed that with '-o' in /etc/mail/submit.cf, restart sendmail
[root@localhost ~]# top -b -n1 | mail -s 'Process snapshot' mymail@mymail.net // in mail.log: Apr 2 12:49:16 localhost sendmail[6252]: o32AnGis006252: to=mymail@mymail.net , ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=49856, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
//test [root@localhost ~]# telnet localhost 25 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused
//commented out #O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA //in sendmail.cf, restart sendmail
//test [root@localhost ~]# telnet localhost 25 Trying 127.0.0.1... telnet: connect to address 127.0.0.1: Connection refused telnet: Unable to connect to remote host: Connection refused
I have this server that runs Tomcat . this server sends mail with localhost as MTAthe local MTA is sendmail (with the default settings) . from time to time i have this strange thing and the emails it sends never reach the destination. the log shows it left the server , but looking at the logi see that the time on the log is wrong . sometime its correct and ometines its +2 hours. i guess this email are bounced at the destinationfor sending at future time . all this email that didnt reach the destination have this in common
Is anyone can help me how to setup sendmail ( Centos 5.2 ) as mail relay for Microsoft exchange. I will put the mail relay in DMZ and Mail server in Local Network.v
I used Zimbra since a week ago to my centos 5 server, but now I'm using google apps. Today I tried to uninstall Zimbra and restore sendmail, but when I try to send a mail to local domain, it responds with an unknown user message and don't deliver the message to google mail.What I forgot in reconfiguration?
Is there a simple way to move the Sendmail queue folder? Presently it's at the default location on /var/spool/mqueue/ but when / recently ran out of space (my fault storing backups there), it was unable to receive any more mail. There is plenty of space at another partition. My /var/opt/scalix location lives on another set of discs with lots of room. I created a folder called /var/opt/scalix/sendmail/mailqueue/ but uncertain how to move the existing queue to it.
I have setup CentOS 5.2 with Nagios to monitor my network and have that configuration almost done. I have also setup Sendmail to forward all mail (really only Nagios notifications) out to my Exchange server using define('SMART_HOST', 'exchange.domain') in the sendmail configuration file and it seems to be working correctly.is there a way to configure Sendmail to forward all mail out through my Exchange server as it is now but send mail out to the internet itself if the exchange server is unavailable, somewhat like a failover configuration.
We are running CentOS 5.4 x86 on ESX 4 Server. We have a busy Help Desk, a Forum and several name-based websites running. Weve been using CentOS for this 'purpose for several years (different versions) and so far we have never had a problem. On Saturday, I applied all the latest updates including the Kernel updates. I rebooted the server and all seemed well until Sunday morning when I didn't get my Logwatch in the mail. Then I got a telephone call from a customer asking me why I hadn't responded to a Trouble Ticket he had created on Saturday afternoon (creating a TT sends an email via sendmail to all the support staff). I did a few tests and sendmail has just stopped working. The Logwatch had been created and had been sent to root, but all mail for root is redirected to my Mail Server on e different box (GroupWise). There was nothing wrong with the mail server, but sendmail has just stopped.
Fortunately I had created a snapshot before I applied the updates, so I reverted back to the snapshot and mail started working again, but I lost 2 days info because I had run the backup before I applied the patches. Now I see there are 132 Updates available, but there is obviously a problem somewhere in there!
I changed the host name on this CentOS 5.5 machine but whenever I reboot the machine the startup pauses at the point of starting sendmail for several minutes and then eventually moves on. What could be causing this?
