[gentoo-user] [OT] Setting up correct domainname

[gentoo-user] [OT] Setting up correct domainname

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1353 bytes --]

Hi All,

Up until a few months ago the ISP of the network in question was happy to 
accept and relay messages from my server <myserver.mydomain.com> which runs 
nagios.  My server gets its IP address from the ISP in question dynamically 
so I use DynDNS to map the subdomain.domain name to it.

To be able to relay messages I of course have set up sendmail to authenticate 
using email_account@ISP.com/passwd_on_ISP.

When the ISP stopped accepting messages I started getting this error message:
================================================================

-----The following addresses had permanent fatal errors-----
<email_account@ISP.com>
  (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid 
sender domain)

-----Transcript of session follows -----
... while talking to smtp.ISP.com:
>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
<<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid sender
domain
554 5.0.0 Service unavailable
================================================================

Does this fail because the ISP's reverse DNS on my dynamically allocated IP 
address resolves to an ISP domain instead of myserver.mydomain.com?

Is there something I could change in the configuration of my server to make 
this work again?
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] [OT] Setting up correct domainname

[Stroller]

On 20 Sep 2009, at 12:30, Mick wrote:
> ...
> -----The following addresses had permanent fatal errors-----
> <email_account@ISP.com>
>  (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :  
> invalid
> sender domain)
>
> -----Transcript of session follows -----
> ... while talking to smtp.ISP.com:
>>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :  
> invalid sender
> domain
> 554 5.0.0 Service unavailable
> ================================================================
>
> Does this fail because the ISP's reverse DNS on my dynamically  
> allocated IP
> address resolves to an ISP domain instead of myserver.mydomain.com?

I'm not quite clear. Does the myserver.mydomain.com resolve to the  
server actually sending the mail? I think that may be what they're  
asking for.

Stroller.

[gentoo-user] Re: [OT] Setting up correct domainname

[Harry Putnam]

Mick <michaelkintzios@gmail.com> writes:

> -----The following addresses had permanent fatal errors-----
> <email_account@ISP.com>
>   (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid 
> sender domain)
>
> -----Transcript of session follows -----
> ... while talking to smtp.ISP.com:
>>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid sender
> domain
> 554 5.0.0 Service unavailable
> ================================================================
>
> Does this fail because the ISP's reverse DNS on my dynamically allocated IP 
> address resolves to an ISP domain instead of myserver.mydomain.com?
>
> Is there something I could change in the configuration of my server to make 
> this work again?

I think you might avoid the problem by making sendmail Impersonate your
isps domain.

Using some or all of these settings in sendmail.mc
 MASQUERADE_AS(`yourISP.domain')dnl
 MASQUERADE_DOMAIN(`youractual.domain')dnl
 FEATURE(masquerade_entire_domain)dnl
 FEATURE(masquerade_envelope)dnl

Re: [gentoo-user] Re: [OT] Setting up correct domainname

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1638 bytes --]

On Sunday 20 September 2009, Harry Putnam wrote:
> Mick <michaelkintzios@gmail.com> writes:
> > -----The following addresses had permanent fatal errors-----
> > <email_account@ISP.com>
> >   (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > invalid sender domain)
> >
> > -----Transcript of session follows -----
> >
> > ... while talking to smtp.ISP.com:
> >>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> >
> > <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid
> > sender domain
> > 554 5.0.0 Service unavailable
> > ================================================================
> >
> > Does this fail because the ISP's reverse DNS on my dynamically allocated
> > IP address resolves to an ISP domain instead of myserver.mydomain.com?
> >
> > Is there something I could change in the configuration of my server to
> > make this work again?
>
> I think you might avoid the problem by making sendmail Impersonate your
> isps domain.
>
> Using some or all of these settings in sendmail.mc
>  MASQUERADE_AS(`yourISP.domain')dnl
>  MASQUERADE_DOMAIN(`youractual.domain')dnl
>  FEATURE(masquerade_entire_domain)dnl
>  FEATURE(masquerade_envelope)dnl

Yes, that should fix the reverse DNS problem alright, but then people who 
receive email notifications from myserver will be confused by the domain that 
these messages are sent from.

I could also use the ISP's domain for my IP address in the server's /etc/hosts 
file - although it would have the same problem with regards to the domain 
that messages are sent from.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] Re: [OT] Setting up correct domainname

[Daniel Troeder]

On Sun, 2009-09-20 at 21:38 +0100, Mick wrote:
> On Sunday 20 September 2009, Harry Putnam wrote:
> > Mick <michaelkintzios@gmail.com> writes:
> > > -----The following addresses had permanent fatal errors-----
> > > <email_account@ISP.com>
> > >   (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > > invalid sender domain)
> > >
> > > -----Transcript of session follows -----
> > >
> > > ... while talking to smtp.ISP.com:
> > >>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> > >
> > > <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected : invalid
> > > sender domain
> > > 554 5.0.0 Service unavailable
> > > ================================================================
> > >
> > > Does this fail because the ISP's reverse DNS on my dynamically allocated
> > > IP address resolves to an ISP domain instead of myserver.mydomain.com?
> > >
> > > Is there something I could change in the configuration of my server to
> > > make this work again?
> >
> > I think you might avoid the problem by making sendmail Impersonate your
> > isps domain.
> >
> > Using some or all of these settings in sendmail.mc
> >  MASQUERADE_AS(`yourISP.domain')dnl
> >  MASQUERADE_DOMAIN(`youractual.domain')dnl
> >  FEATURE(masquerade_entire_domain)dnl
> >  FEATURE(masquerade_envelope)dnl
> 
> Yes, that should fix the reverse DNS problem alright, but then people who 
> receive email notifications from myserver will be confused by the domain that 
> these messages are sent from.
I don't know this sendmail feature, but I think sendmail should not
modify your message, but just the envelop. So `youractual.domain' would
still be in the "To"-header, while `yourISP.domain' is in the envelop.
That should make your ISP happy, and no receiver will ever notice
(except if they look at the headers), because MUAs only show the
"To"-header :)

Your ISP could still check the "To"-header - but that would be just
plain ugly...

> I could also use the ISP's domain for my IP address in the server's /etc/hosts 
> file - although it would have the same problem with regards to the domain 
> that messages are sent from.

Re: [gentoo-user] Re: [OT] Setting up correct domainname

[Mick]

[-- Attachment #1: Type: text/plain, Size: 2516 bytes --]

On Sunday 20 September 2009, Daniel Troeder wrote:
> On Sun, 2009-09-20 at 21:38 +0100, Mick wrote:
> > On Sunday 20 September 2009, Harry Putnam wrote:
> > > Mick <michaelkintzios@gmail.com> writes:
> > > > -----The following addresses had permanent fatal errors-----
> > > > <email_account@ISP.com>
> > > >   (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > > > invalid sender domain)
> > > >
> > > > -----Transcript of session follows -----
> > > >
> > > > ... while talking to smtp.ISP.com:
> > > >>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> > > >
> > > > <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > > > invalid sender domain
> > > > 554 5.0.0 Service unavailable
> > > > ================================================================
> > > >
> > > > Does this fail because the ISP's reverse DNS on my dynamically
> > > > allocated IP address resolves to an ISP domain instead of
> > > > myserver.mydomain.com?
> > > >
> > > > Is there something I could change in the configuration of my server
> > > > to make this work again?
> > >
> > > I think you might avoid the problem by making sendmail Impersonate your
> > > isps domain.
> > >
> > > Using some or all of these settings in sendmail.mc
> > >  MASQUERADE_AS(`yourISP.domain')dnl
> > >  MASQUERADE_DOMAIN(`youractual.domain')dnl
> > >  FEATURE(masquerade_entire_domain)dnl
> > >  FEATURE(masquerade_envelope)dnl
> >
> > Yes, that should fix the reverse DNS problem alright, but then people who
> > receive email notifications from myserver will be confused by the domain
> > that these messages are sent from.
>
> I don't know this sendmail feature, but I think sendmail should not
> modify your message, but just the envelop. So `youractual.domain' would
> still be in the "To"-header, while `yourISP.domain' is in the envelop.
> That should make your ISP happy, and no receiver will ever notice
> (except if they look at the headers), because MUAs only show the
> "To"-header :)
>
> Your ISP could still check the "To"-header - but that would be just
> plain ugly...
>
> > I could also use the ISP's domain for my IP address in the server's
> > /etc/hosts file - although it would have the same problem with regards to
> > the domain that messages are sent from.

I will give it a go - hopefully the ISP will be happy and I won't need to 
register with a mail relaying service.

Thanks for your suggestions.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

[gentoo-user] Re: [OT] Setting up correct domainname

[Harry Putnam]

Mick <michaelkintzios@gmail.com> writes:

>> I think you might avoid the problem by making sendmail Impersonate your
>> isps domain.
>>
>> Using some or all of these settings in sendmail.mc
>>  MASQUERADE_AS(`yourISP.domain')dnl
>>  MASQUERADE_DOMAIN(`youractual.domain')dnl
>>  FEATURE(masquerade_entire_domain)dnl
>>  FEATURE(masquerade_envelope)dnl
>
> Yes, that should fix the reverse DNS problem alright, but then people who 
> receive email notifications from myserver will be confused by the domain that 
> these messages are sent from.
>
> I could also use the ISP's domain for my IP address in the server's /etc/hosts 
> file - although it would have the same problem with regards to the domain 
> that messages are sent from.

It is possible to do lots of complicated rewriting with
`genericstable', both in and out... maybe that would bare looking
into. 

Re: [gentoo-user] [OT] Setting up correct domainname

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1344 bytes --]

On Sunday 20 September 2009, Stroller wrote:
> On 20 Sep 2009, at 12:30, Mick wrote:
> > ...
> > -----The following addresses had permanent fatal errors-----
> > <email_account@ISP.com>
> >  (reason: 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > invalid
> > sender domain)
> >
> > -----Transcript of session follows -----
> >
> > ... while talking to smtp.ISP.com:
> >>>> MAIL From:<nagios@myserver.mydomain.com> SIZE=745 AUTH=<>
> >
> > <<< 550 5.1.0 <nagios@myserver.mydomain.com> sender rejected :
> > invalid sender
> > domain
> > 554 5.0.0 Service unavailable
> > ================================================================
> >
> > Does this fail because the ISP's reverse DNS on my dynamically
> > allocated IP
> > address resolves to an ISP domain instead of myserver.mydomain.com?
>
> I'm not quite clear. Does the myserver.mydomain.com resolve to the
> server actually sending the mail? I think that may be what they're
> asking for.

Thanks Stroller!  That was it!  For some reason the particular subdomain had 
been taken out of the list of DynDNS and therefore it would no longer resolve 
to the server's IP address.  It goes to show ... start with the obvious 
things first.  Thank goodness I did not started hacking the sendmail 
configuration!  Ha, ha!
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]