[comp.mail.sendmail] Some more questions with our internet gateway

barnett@crdgw1.crd.ge.com (Bruce Barnett) (03/29/89)

I'm trying to get out internet gateway 100% functional, and I have some
more questions.

Before the questions, I sent an Alpha release of Ease 2.1 to several
people. Let me know if you want  one of these early copies.

Thanks all for the info on ruleset 0. I think the test suite I have included
in the Ease 2.1 package works the right way.

Questions:

1. Which users should be Trusted. I have root uucp network and daemon.
Are there security issues? Can I eliminate any?

2. We are getting errors when we try to deliver to some remote sites.

We get bounced mail with the error
	Remote protocol error

Why? These addresses work on another machine.

3. I noticed the -ba (ARPA) option. When is this mode used?

4. when I do a sendmail -bp, I get the error
                 (Deferred: Bad file number)

Why? There are several messages like this, and I don't know how to
resend them. I have killed and restarted sendmail, and these messages stay
there. (They are all local machines). I tried to force these messages out
by typing sendmail -v -q, and I notice that there were a lot of processes
started up, something like
	sendmail -em -fuser@machine
or
	mail -r -fuser@domain
that seem to stay there forever. They don't go away, and cause the load factor
to creep up and up and up and up...

I have looked at the qf* and df* files, and they look okay to me.
Do I have the permission of something wrong? The wrong option?

Any ideas? Thanks.

--
Bruce G. Barnett	<barnett@crdgw1.ge.com>  a.k.a. <barnett@[192.35.44.4]>
			uunet!steinmetz!barnett, <barnett@steinmetz.ge.com>

ecf_hap@jhunix.HCF.JHU.EDU (Andrew Poling) (03/31/89)

In article <81@crdgw1.crd.ge.com> barnett@crdgw1.crd.ge.com (Bruce Barnett) writes:
>1. Which users should be Trusted. I have root uucp network and daemon.
>Are there security issues? Can I eliminate any?

All that being a trusted user means is that you can lie about who is sending
the mail.  Thus another mail program could make the mail from the "sender"
instead of from daemon or somesuch.



Andy
--
andy@gollum.hcf.jhu.edu
ecf_hap@jhunix.UUCP
ECF_HAP@JHUVMS.BITNET