[ale] masq and sendmail

[Gary Maltzen]

The "Received: from" line is added by your upstream mail relay.
When sendmail connects to another server, it sends

  HELO my.name.is

The "denali.home.edu" is defined by the $j macro.
The default is the hostname-dot-domain of your machine.
You can change that by explicitly defining the $j macro

   Djdenali.atlnet.com

If you use m4 to generate your sendmail.cf then you want to add

  define(`confDOMAIN_NAME', `denali.atlnet.com')dnl

to your sendmail.mc

>I've had my little firewall setup running for a while, apparently
>successfully, at least I thought so.  Basically, I have a primary
>firewall machine that connects to the internet that does
>masq/forwarding.  I have a dmz network separated from an internal
>network by a choke firewall machine that also does masq/forwarding.  For
>a lack of a better name, my internal subnet is 'home.edu.' ;)  Anyway,
>I've been using this configuration for a while very successfully.  Just
>recently, I've had some email to a particular list bounce because it
>claims it can not authenticate denali.home.edu.  This is my machine that
>is on my internal network and the home.edu network should not be seen
>outside.  Now, the only thing I've changed recently is I've upgraded
>Netscape, which I use for my mailer.
>
>I recently sent a test email message to my work address so I could view
>the actual mail headers.  denali.home.edu does in fact show up in the
>headers, which I did not expect.  But, they don't appear as the
>'sending' machine.  So, it appears that this list is running through the
>headers and verifying every domain that it finds.
>
>A couple of questions.  First off, should the home.edu domain be showing
>up in these headers as it is, when I'm masqing all this stuff?  I am
>using sendmail on the denali.home.edu machine, is this the problem?
>
>Although I've changed the mail corporate mail server names (you know how
>that goes) and ip address, here is a short excerpt of the email header:
>
>>From - Wed Nov  1 09:07:02 2000
>Received: from xxxx.xxx.att.com ([XXX.XXX.XXX.XXX]) by yyyy.yyy.att.com
>with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2652.39)
>    id VPV6ZDV2; Mon, 30 Oct 2000 15:30:39 -0600
>Received: by xxxx.xxx.att.com (8.8.8+Sun/ATTEMS-1.4.1 sol2)
>    id QAA15544; Mon, 30 Oct 2000 16:29:27 -0500 (EST)
>Received: from zzzz.zzz.att.com by xxxx.xxx.att.com
>(8.8.8+Sun/ATTEMS-1.4.1 sol2)
>    id QAA15436; Mon, 30 Oct 2000 16:29:25 -0500 (EST)
>
>Received: from denali.home.edu ([208.148.155.187])
>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
>    by zzzz.zzz.att.com (AT&T IPNS/MSI-2.2) with ESMTP id QAA29605
>    for <gamyers at att.com>; Mon, 30 Oct 2000 16:29:45 -0500 (EST)
>Received: from denali.atlnet.com (esoteric at localhost [127.0.0.1])
>    by denali.home.edu (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id
>QAA11019
>    for <gamyers at att.com>; Mon, 30 Oct 2000 16:25:10 -0500
>Sender: esoteric at denali.atlnet.com
>
>--
>Until later: Geoffrey           esoteric at denali.atlnet.com
>
>"Great spirits have always found violent opposition from mediocre minds.
>The
>latter cannot understand it when a man does not thoughtlessly submit to
>hereditary prejudices but honestly and courageously uses his
>intelligence."
>- Albert Einstein
>--
>To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.