Help - Search - Members - Calendar
Full Version: SPAM and SENDMAIL.. Help
The Planet Forums > System Administration > Mail Hosting
syrinx2112
Hello all,

Okay, I am having spam issues, but mine went further, with all the spam leaving my IP address/server virtually, meaning, I don't think there is something on my server sending out SPAM (I have checked) (but that is another way how knuckle heads send out SPAM). My IP is being used to falsify the true source. Anyway, I was blacklisted.

Being black listed led me to this black list server via theplanet: http://cbl.abuseat.org/sendmailhelp.html

Which if you go to a site such as: http://www.mailradar.com/articles/Smart-Se...k-17/page1.html and go to the right bottom side of the page. You can test your IP address to see if you are blacklisted for free/and no registration required.

Bottom line I was reading what cbl.abusenet.org suggested to do for sendmail servers or I should say for servers that utilize sendmail.

Per the instructions at cbl.abuseat.org I tried to modify and generate a new sendmail.mc file thus automatically generating sendmail.cf file... Well, I messed something up. Now I can't eve get to www.mysite.com/webmail...

I am not sure what I did wrong. And if any of you know where I can read what is the best way to configure a sendmail.mc file so I can avoid the black list, PLEASE SHARE...

I asked the theplanet for help - since it was their original out of the box sendmail configuration that allowed me to get on a blacklist and their reply was - $150.00 per hour. I know I messed this up, and I am sure one of their sharp techs can assist me and have my webmail back up n 5 minutes... I am a 6 year customer with them... Maybe a little break is in order, eh? I had to make the changes myself since theplanet; all they did was direct me to the cbl.abusenet website.. I had to do it myself...

Sorry I am pointing fingers, I'm a bit flustered for MY mistake. I did create backups of both my /etc/mail/sendmail.cf and /etc/mail/sendmail.mc files, I tried to revert back to original changes, but still no luck...

My questions are:

Can somebody assist me in getting my webmail working again?

Can somebody show a proper configured sendmail.cf and sendmail.mc files?

Below is what did in the exact order.


Example of what to check on a system to see
if all is okay on your system:

------EXAMPLE: From cbl.abuseat.org/hostname.html----


shell prompt> uname -n
mail.example.com

shell prompt> hostname -s
mail

shell prompt> hostname -d
example.com

shell prompt> hostname -f
mail.example.com

shell prompt> hostname
mail.example.com



----------My actual servers response------------

[root@74 mail]# domainname
(none)
[root@74 mail]# uname -n
74.75.767.89
[root@74 mail]# hostname -s
75
[root@74 mail]# hostname -d
75.767.89
[root@74 mail]# hostname -f
74.75.767.89
[root@74 mail]# hostname
74.75.767.89
[root@74 mail]#


My responses don't match what CBL has. I show IP address rather
than a .com domain name.


----CBL Suggests-------------------



If you have a static IP, then /etc/sysconfig/network will have your initial hostname
assignment. It should have the following lines:

NETWORKING=yes
HOSTNAME="mail.example.com"


----My server has------------------

[root@74 sysconfig]# more network
NETWORKING=yes
NETWORKING_IPV6=yes
#HOSTNAME=server2.mysite.com
HOSTNAME=74.75.767.89

Shouldn't my hostname be something similar www.mysite.com?

----------Checking /proc/sys/kernel/hostname-----------

[root@74 etc]# cat /proc/sys/kernel/hostname
74.75.767.89

Im not sure what I am suppose to have for this, CBL did not
give any examples.

--------in my sendmail.mc file I changed the following lines------------

define(`confCW_FILE', `/etc/mail/local-host-names')dnl
define(`confDOMAIN_NAME', `mysite.com')dnl

to

define(`confCW_FILE', `/etc/mail/local-host-names')dnl
define(`confDOMAIN_NAME', `mail.mysite.com')dnl <<I added "mail" in front of .mysite.com>>


-----------I modified vi /etc/mail/local-host-names-----------

Before this file only had the comment line in there.
# local-host-names - include all aliases for your machine here.

Now

[root@74 mail]# cat local-host-names
# local-host-names - include all aliases for your machine here.
mysite.com
www.mysite.com
mail.mysite.com

I added .com names to this file.

Any and all help is so appreciated...
thedude
when you say you can't get to mysite.com/webmail

Do you get an error of any kind?
wshawn
Sry.. I should have read further before I posted.


You are talking about two different animals.

Sendmail is not going to affect a url or dns.

If you are running a script and it is crapping out on you, then you may simply have a version conflict, permissions issue, or a sendmail configuration which is trashing your inboxes which in turn would trash a script.


Find the offending domain. i

cp the mailbox to mailbox.hold
cat NUL> mailbox to dump it

see if the script fires up.

You can always check the logs or try and run the php file from a command prompt to see what is going on. See if you can turn debug on in php.ini so it yells a lot.

Logs is the best place to start

===================================================

According to your data your dns is misconfigured.

Try running a dig example.com as root to see if it is even doing look ups.

I will take a look at your link to see what they told you to tweak to see what got hit.
=========================== back =====================
I went and read the cbl link. Limited as it was, I saw nothing which should have messed with your dns or server strings.

You may want to run a rootkit check for General Purpose.

You may also want to look at /etc/hosts to see if it is formated correctly. More importantly check the date on the file to see if it was changed recently. Also, take a look to see if you have a backup of a working one.


Based on the very limited amount of information here, you may have been owned, or you have some messed up files outside the sendmail issue.

Another odd thing to check is if you have any hard drive errors coming back from dmesg....
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.