[ILUG] 550 5.7.1 Relaying denied

[Chris Boyd]

I recently upgraded my RH 6.2 to RH 7.1. I got
sendmail up and running but cannot get sendmail to
relay an internal IP when trying to send a message
out.  The PC's all are internal IP's (192.168.0.0). 
When one tries to send out mail through our mailserver
the maillog gives the following error msg:
(irelands-web.ie is local domain)

Oct  6 20:04:26 leviathan sendmail[32441]:
f96J4Bd32441: ruleset=check_rcpt,
arg1=<chris_d_b71 at yahoo.com>, relay=[192.168.0.6],
reject=550 5.7.1 <bob at yahoo.com>... Relaying denied
Oct  6 20:04:26 leviathan sendmail[32441]:
f96J4Bd32441: from=<user at irelands-web.ie>, size=0,
class=0, nrcpts=0, proto=ESMTP, relay=[192.168.0.6]

I cannot figure out why it won't relay an internal IP.
 (I do a "makemap hash access.db < access and then
restart sendmail to update)
In access.db:

localhost.localdomain           RELAY
localhost                       RELAY
irelands-web.ie                 RELAY
192.168.0.                      RELAY
(also tried 192.168.0.0.)

in /etc/hosts.allow:

ALL: 194.125.22. (server IP's)
ALL: 194.125.4.
ALL: 192.168.0.

in sendmail.cf: 

###  check_rcpt -- check SMTP `RCPT TO:' command
argument
######################################################################

SLocal_check_rcpt
Scheck_rcpt
R$*                     $: $1 $| $>"Local_check_rcpt"
$1
R$* $| $#$*             $#$2
R$* $| $*               $@ $>"Basic_check_rcpt" $1

SBasic_check_rcpt
# check for deferred delivery mode
R$*                     $: < ${deliveryMode} > $1
R< d > $*               $@ deferred
R< $* > $*              $: $2


R$*                     $: $>ParseRecipient $1        
 strip relayable hosts



# blacklist local users or any host from receiving
mail
R$*                     $: <?> $1
R<?> $+ < @ $=w >       $: <> <$1 < @ $2 >> $|
<F:$1@$2> <U:$1@> <H:$2>
R<?> $+ < @ $* >        $: <> <$1 < @ $2 >> $|
<F:$1@$2> <H:$2>
R<?> $+                 $: <> <$1> $| <U:$1@>
R<> <$*> $| <$+>        $: <@> <$1> $| $>SearchList
<+To> $| <$2> <>
R<@> <$*> $| <$*>       $: <$2> <$1>           
reverse result
R<?> <$*>               $: @ $1         mark address
as no match
R<$={Accept}> <$*>      $: @ $2         mark address
as no match

R<REJECT> $*            $#error $@ 5.2.1 $: "550
Mailbox disabled for this recipient"
R<DISCARD> $*           $#discard $: discard
R<ERROR:$-.$-.$-:$+> $*         $#error $@ $1.$2.$3 $:
$4
R<ERROR:$+> $*          $#error $: $1
R<$+> $*                $#error $: $1           error
from access db
R@ $*                   $1              remove mark


# authenticated?
R$*             $: $1 $| $>RelayAuth $1 $| $&{verify} 
 client authenticated?
R$* $| $# $+            $# $2                         
 error/ok?
R$* $| $*               $: $1                         
 no

# authenticated by a trusted mechanism?
R$*                     $: $1 $| $&{auth_type}
R$* $|                  $: $1
R$* $| $={TrustAuthMech}        $# RELAYAUTH
R$* $| $*               $: $1
# anything terminating locally is ok
R$+ < @ $=w >           $@ RELAYTO
R$+ < @ $* $=R >        $@ RELAYTO
R$+ < @ $+ >            $: $>LookUpDomain <$2> <?> <$1
< @ $2 >> <+To>
R<RELAY> $*             $@ RELAYTO
R<$*> <$*>              $: $2



# check for local user (i.e. unqualified address)
R$*                     $: <?> $1
R<?> $* < @ $+ >        $: <REMOTE> $1 < @ $2 >
# local user is ok
R<?> $+                 $@ RELAYTOLOCAL
R<$+> $*                $: $2

# anything originating locally is ok
# check IP address
R$*                     $: $&{client_addr}
R$@                     $@ RELAYFROM           
originated locally
R0                      $@ RELAYFROM           
originated locally
R$=R $*                 $@ RELAYFROM           
relayable IP address
R$*                     $: $>LookUpAddress <$1> <?>
<$1> <+Connect>
R<RELAY> $*             $@ RELAYFROM           
relayable IP address
R<$*> <$*>              $: $2
R$*                     $: [ $1 ]               put
brackets around it...
R$=w                    $@ RELAYFROM            ...
and see if it is local


# check client name: first: did it resolve?
R$*                     $: < $&{client_resolve} >
R<TEMP>                 $#error $@ 4.7.1 $: "450
Relaying temporarily denied. Cannot resolve PTR record
for " $&{client_addr}
R<FORGED>               $#error $@ 5.7.1 $: "550
Relaying denied. IP name possibly forged "
$&{client_name}
R<FAIL>                 $#error $@ 5.7.1 $: "550
Relaying denied. IP name lookup failed "
$&{client_name}
R$*                     $: <?> $&{client_name}
# pass to name server to make hostname canonical
R<?> $* $~P             $:<?>  $[ $1 $2 $]
R$* .                   $1                      strip
trailing dots
R<?>                    $@ RELAYFROM
R<?> $=w                $@ RELAYFROM
R<?> $* $=R                     $@ RELAYFROM
R<?> $*                 $: $>LookUpDomain <$1> <?>
<$1> <+Connect>
R<RELAY> $*             $@ RELAYFROM
R<$*> <$*>              $: $2

# anything else is bogus
R$*                     $#error $@ 5.7.1 $: "550
Relaying denied"



Any ideas as I'm not sure where else to look?

Thanks, 




=====
"They that give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -- Benjamin Franklin, 1759. 

Chris Boyd

Home: 353 1 671 9858
Cell: 353 87 955 9519

__________________________________________________
Do You Yahoo!?
NEW from Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1