My sendmail appears to be fixed, advice needed though

[Giorgos Keramidas]

On 2008-01-05 13:08, Andrew Falanga <af300wsm at gmail.com> wrote:
> Hi everybody,
> Sorry for this flurry of e-mail from me over the last few days.  This
> has been highly frustrating.

You should post *more* details, not less.  One of the things which was
missing from the older posts (or at least, one thing which I didn't see)
was a *FULL* copy of your local *.mc configuration file.

> Basically, the instructions for setting up SSL and Authentication (from
> http://www.puresimplicity.net/~hemi/freebsd/sendmail.html) instruct to have
> the following lines in the <hostname>.mc file:
>
> define(`confAUTH_MECHANISMS',`PLAIN LOGIN')dnl
> TRUST_AUTH_MECH(`PLAIN LOGIN')dnl
> define(`CERT_DIR', `/etc/mail/certs')dnl
> define(`confCACERT_PATH', `CERT_DIR')dnl
> define(`confCACERT', `CERT_DIR/mycert.pem')dnl
> define(`confSERVER_CERT', `CERT_DIR/mycert.pem')dnl
> define(`confSERVER_KEY', `CERT_DIR/mykey.pem')dnl
> define(`confCLIENT_CERT', `CERT_DIR/mycert.pem')dnl
> define(`confCLIENT_KEY', `CERT_DIR/mykey.pem')dnl
> DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
> DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
>
> I deleated this line:
> DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl

That doesn't sound right.  I think it's because you have the options
listed above *after* the MAILER() calls.  This means that the options
are not `set' at the time the MAILER() calls generate your
configuration.  So you probably end up with several instances of the
`MTA' and `TLSMTA' daemon definitions in the final `sendmail.cf' file.

This could very well be the explanation of why your Sendmail *is*
listening on port :25 and it *also* tries to listen again, logging the
failures in syslog.

> Is this a viable fix or will I be missing something?  I was able to
> telnet to port 25 and send mail that way.  I cannot relay without
> logging in, so I think it's fixed.

See my previous post about moving MAILER() calls to the end of the file,
and give it another spin.  You are *very* close to figuring it all out
and having a fully working setup, AFAICT :)

Regards,
Giorgos