Problems with sendmail

[npereira]

Hi all,

I'm having a weird issue that I can't seem to resolve....

In my maillog, I keep getting this error message:

Apr 2 12:48:01 nelsoncentos sendmail[5332]: m32Gm1nH005330: to=<otrs@protus.org>, ctladdr=<otrs@nelsoncentos.protus.org> (501/4, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=120718, relay=cg-cluster.protus.org., dsn=5.1.2, stat=Host unknown (Name server: cg-cluster.protus.org.: host not found)

Yet, I dont' have anywhere in my configs that I show a nameserver of cg-cluster.protus.org

Where can I look to stop this problem?

Thanks

[rcgreen]

Are you trying to send mail to someone at protus.org, or is someone there
sending mail to you? They probably have a configuration anomaly and
your server is complaining. Does your server get and send mail directly
to the net or does it relay to your ISPs mail server?

[npereira]

im trying to find out what this log file is telling me exactly...

Is it trying to sendmail to otrs@protus.org?
if so, I have no clue where this otrs@protus.org is configured....
Thant's what I need help on... What is this log message saying....

Are you trying to send mail to someone at protus.org, or is someone there
sending mail to you? They probably have a configuration anomaly and
your server is complaining. Does your server get and send mail directly
to the net or does it relay to your ISPs mail server?

[rybo]

Yes, it is sending the mail to otrs@protus.org using the relaying from cg-cluster.protus.org.
If protus.org are not your enterprise network - Congratulations, your server is used as the spam machine!

The reason for this is that your sendmail is configured for open relay.
Google for 'sendmail relay config'

[jnojr]

This might also be caused by a spammer sending spam to the protus.org user and forging your address as the From: and Reply-To: I always have a few dozen of these trying to be delivered and a few thousand in my mqueue. It's just part of having an email address that anyone knows.

[athlon_crazy]

simply go to mail queue & delete it!