All

I am having a bit of a problem with my sendmail smtp server. The environment:
Redhat Linux 8
sendmail-8.12.8-9.80.

The mailserver is used by our application to send mail notifications to users on the system. The application is hosted on 2 different servers (separate domains) which use the same smtp server to send mails.

The problem is, every now and then we get these messages (apparently spam sent from my user account)... my e-mail ID is used...and I saw the following entry in the maillog file:

Nov 4 14:02:33 MUSTANG sendmail[19338]: hA4J2Vht019338: from=<myself@mydomain.com>, size=1525, class=0, nrcpts=1, msgid=<08a201c3a306$a99a3cf5$b400a8c0@lab50313>, proto=ESMTP, daemon=Daemon0, relay=[209.186.12.86]

I got the IP address from the message header and grepped the maillog file.

Is it possible that someone is using my smtp server for spam? does the above message mean that the mail was sent put from my smtp server... seems so right?

I need to be able to stop this.

The following directives are set in the sendmail.cf file:

# Hosts for which relaying is permitted ($=R)
FR-o /etc/mail/relay-domains

The /et/mail/relay-domains contain 2 entries... of the two domains I trust.

The /etc/mail/access has the domain names of the above 2 domains (one is localdomain, and 1 more domain that I trust along with the IP address.).

Am i missing a configuration that will allow relaying from only the two trusted hosts?

Any help will be greatly appreciated.

Thanks

KS

This line tells you where the email came from.

msgid=<08a201c3a306$a99a3cf5$b400a8c0@lab50313>

is lab50313 in your relay-domain?

if so then you need to goto that host and look for your problem.

if it is not in your relay-domain then there has to be something wrong w/ the way you have your sendmail setup on the relaying server.

I have no clue about 'lab50313'. It is definitely not in my relay-domains. What could be wrong with the way that sendmail is setup. I am also researching this... any direction would be extremely helpful!

I did not understand what you meant by:
...something wrong with the way sendmail is setup on the relaying server.

Do you mean the sendmail server?

Thanks

KS