Rocksolid Light

News from da outaworlds

mail  files  register  groups  login

Message-ID:  

BOFH excuse #108: The air conditioning water supply pipe ruptured over the machine room

comp / comp.mail.sendmail / DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25

SubjectAuthor
* DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25Jobst Schmalenbach
`* Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25Claus Aßmann
 +* Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25Marco Moock
 |`- Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25Jobst Schmalenbach
 `- Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25Jobst Schmalenbach

1
Subject: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25
From: Jobst Schmalenbach
Newsgroups: comp.mail.sendmail
Organization: A noiseless patient Spider
Date: Thu, 9 Jan 2025 05:06 UTC
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: jobst@barrett.com.au (Jobst Schmalenbach)
Newsgroups: comp.mail.sendmail
Subject: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on
port 25
Date: Thu, 9 Jan 2025 16:06:31 +1100
Organization: A noiseless patient Spider
Lines: 42
Message-ID: <vlnlgq$37ibq$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 09 Jan 2025 06:06:34 +0100 (CET)
Injection-Info: dont-email.me; posting-host="ebafee78536e1845139f4dcce4f82f09";
logging-data="3393914"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19ddlrF48JynDl+8fzQv8a4"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:lXFWhxnlzs+xlk1QcJjfrYxPaMY=
Content-Language: en-AU
View all headers

Hi

I didn't know "Modifiers=A" existed until I came across this

https://www.hydrus.org.uk/journal/sendmail-noauth.html

referencing a thread in

https://groups.google.com/g/comp.mail.sendmail/c/c8x-bA07_d0

Since the discovery of "Modifiers=A" I have tried, yet the attempts are
still coming in (duplicates deleted):

Jan 9 12:28:13 mail saslauthd[1930]: : auth failure: [user=trangtry]
[service=smtp] [realm=barrett.com.au] [mech=pam] [reason=PAM auth error]
Jan 9 12:55:45 mail saslauthd[1933]: : auth failure: [user=business]
[service=smtp] [realm=barrett.com.au] [mech=pam] [reason=PAM auth error]
Jan 9 13:00:16 mail saslauthd[1929]: : auth failure:
[user=barrykennedy] [service=smtp] [realm=barrett.com.au] [mech=pam]
[reason=PAM auth error]
Jan 9 13:27:53 mail saslauthd[1930]: : auth failure: [user=psf]
[service=smtp] [realm=barrett.com.au] [mech=pam] [reason=PAM auth error]
Jan 9 13:36:06 mail saslauthd[1933]: : auth failure: [user=scr]
[service=smtp] [realm=barrett.com.au] [mech=pam] [reason=PAM auth error]

The important bits in the sendmail.mc file:

define(`confAUTH_OPTIONS', `p')
TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 PLAIN')
define(`confAUTH_MECHANISMS', `EXTERNAL DIGEST-MD5 CRAM-MD5 PLAIN')
DAEMON_OPTIONS(`Family=inet, Addr=101.0.102.2, Port=smtp,
Name=MTA-barrett.com.au, Modifiers=A')
DAEMON_OPTIONS(`Family=inet, Addr=127.0.0.1, Port=smtp,
Name=MTA-localhost, Modifiers=A')
DAEMON_OPTIONS(`Family=inet, Addr=101.0.102.2, Port=smtps,
Name=MTA-SSL-barrett.com.au, Modifiers=s')

versions:
cyrus-sasl.x86_64 2.1.27-6.el8_5
sendmail.x86_64 8.15.2-34.el8

Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25
From: Claus Aßmann
Newsgroups: comp.mail.sendmail
Organization: MGT Consulting
Date: Thu, 9 Jan 2025 06:55 UTC
References: 1
Path: news.eternal-september.org!eternal-september.org!feeder3.eternal-september.org!news.quux.org!weretis.net!feeder9.news.weretis.net!news.misty.com!.POSTED.veps.esmtp.org!not-for-mail
From: INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org (Claus Aßmann)
Newsgroups: comp.mail.sendmail
Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on
port 25
Date: Thu, 9 Jan 2025 01:55:15 -0500 (EST)
Organization: MGT Consulting
Sender: <ml+sendmail(-no-copies-please)@esmtp.org>
Message-ID: <vlnrsj$vsg$1@news.misty.com>
References: <vlnlgq$37ibq$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 9 Jan 2025 06:55:15 -0000 (UTC)
Injection-Info: news.misty.com; posting-host="veps.esmtp.org:155.138.203.148";
logging-data="32656"; mail-complaints-to="abuse@misty.com"
Mail-Copies-To: never
X-Newsreader: trn 4.0-test77 (Sep 1, 2010)
Originator: ca@x2.esmtp.org (Claus Assmann)
View all headers

Jobst Schmalenbach wrote:

> Since the discovery of "Modifiers=A" I have tried, yet the attempts are

> DAEMON_OPTIONS(`Family=inet, Addr=101.0.102.2, Port=smtp,
> Name=MTA-barrett.com.au, Modifiers=A')

You can easily check it yourself:

telnet 101.0.102.2 25
wait for greeting
EHLO your.host

$ telnet 101.0.102.2 25
220 mail.barrett.com.au ESMTP SMTP
ehlo my.host
250-barrett.com.au Hello ....
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 360000000
250-DSN
250-ETRN
250-STARTTLS
250-DELIVERBY
250 HELP
AUTH Login asb
503 5.3.3 AUTH not available

Seems to work as expected.

Hence the AUTH attempts are on a different port or from something else.

> sendmail.x86_64 8.15.2-34.el8

Pretty old?

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.

Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25
From: Marco Moock
Newsgroups: comp.mail.sendmail
Organization: A noiseless patient Spider
Date: Thu, 9 Jan 2025 16:36 UTC
References: 1 2
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: mm+usenet-es@dorfdsl.de (Marco Moock)
Newsgroups: comp.mail.sendmail
Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication
attempts on port 25
Date: Thu, 9 Jan 2025 17:36:17 +0100
Organization: A noiseless patient Spider
Lines: 17
Message-ID: <20250109173617.0f0c2fa6@ryz.dorfdsl.de>
References: <vlnlgq$37ibq$1@dont-email.me>
<vlnrsj$vsg$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Injection-Date: Thu, 09 Jan 2025 17:36:18 +0100 (CET)
Injection-Info: dont-email.me; posting-host="0c55264397a85eb091ce5077d65f41fa";
logging-data="3602557"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18mp55J04K2vJpz+Q7eguow"
Cancel-Lock: sha1:eoYN3gnqUZZTHXsLrZbrcmFNPJE=
View all headers

On 09.01.2025 01:55 Uhr Claus Aßmann wrote:

> > sendmail.x86_64 8.15.2-34.el8
>
> Pretty old?

The version that is being shipped with RHEL8.
el8 indicates that.

RHEL users want old versions. :-)

--
kind regards
Marco

Send spam to 1736384115muell@stinkedores.dorfdsl.de

Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25
From: Jobst Schmalenbach
Newsgroups: comp.mail.sendmail, comp.mail.mutt
Organization: A noiseless patient Spider
Date: Sun, 12 Jan 2025 23:18 UTC
References: 1 2
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: jobst@barrett.com.au (Jobst Schmalenbach)
Newsgroups: comp.mail.sendmail,comp.mail.mutt
Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts
on port 25
Date: Mon, 13 Jan 2025 10:18:57 +1100
Organization: A noiseless patient Spider
Lines: 12
Message-ID: <vm1il2$1f0c0$1@dont-email.me>
References: <vlnlgq$37ibq$1@dont-email.me> <vlnrsj$vsg$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 13 Jan 2025 00:18:59 +0100 (CET)
Injection-Info: dont-email.me; posting-host="6a3071a6ee0b5411629fc825acb1d9b9";
logging-data="1540480"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/hrgylpPYU2Wr34fwv6p0Q"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:nrtf/9ULHNPU4evpYRJtdQqgkRM=
Content-Language: en-AU
In-Reply-To: <vlnrsj$vsg$1@news.misty.com>
View all headers

On 09/01/2025 17:55, Claus Aßmann wrote:
> Jobst Schmalenbach wrote:
>
>> Since the discovery of "Modifiers=A" I have tried, yet the attempts are
>
>> sendmail.x86_64 8.15.2-34.el8
>
> Pretty old?
>

This is one of my bigger servers (i.e. many services) running AlmaLinux8
.... difficult to "upgrade" it every time a new Alma version arrives.

Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts on port 25
From: Jobst Schmalenbach
Newsgroups: comp.mail.sendmail
Organization: A noiseless patient Spider
Date: Sun, 12 Jan 2025 23:19 UTC
References: 1 2 3
Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: jobst@barrett.com.au (Jobst Schmalenbach)
Newsgroups: comp.mail.sendmail
Subject: Re: DAEMON_OPTIONS with Modifiers=A but still authentication attempts
on port 25
Date: Mon, 13 Jan 2025 10:19:56 +1100
Organization: A noiseless patient Spider
Lines: 9
Message-ID: <vm1ims$1f0c0$2@dont-email.me>
References: <vlnlgq$37ibq$1@dont-email.me> <vlnrsj$vsg$1@news.misty.com>
<20250109173617.0f0c2fa6@ryz.dorfdsl.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 13 Jan 2025 00:19:57 +0100 (CET)
Injection-Info: dont-email.me; posting-host="6a3071a6ee0b5411629fc825acb1d9b9";
logging-data="1540480"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+cxwT7I+s7D4Ia+iS4BYZa"
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:jhRrHRSgXkXQzzFIX6w5E2d/AJY=
In-Reply-To: <20250109173617.0f0c2fa6@ryz.dorfdsl.de>
Content-Language: en-AU
View all headers

On 10/01/2025 3:36, Marco Moock wrote:
> On 09.01.2025 01:55 Uhr Claus Aßmann wrote:
>
>>> sendmail.x86_64 8.15.2-34.el8
>
> RHEL users want old versions. :-)

Not really ;-)

1

rocksolid light 0.9.8
clearnet tor