SENDMAIL! Receiving ok, not sending

When I run:

netstat -an | grep :25

I get:

tcp 0 0 0.0.0.0:25 0.0.0.0:* listen

As far as sending mail goes, I am using Webmin's interface, going into the user's mailbox and hitting the compose button. I've also tried sending mail from a php script that I know works and has worked before when I was unable to receive. No I can receive fine, I just can't send anymore.

When I tried to send from a command line, I didn't get the mail to the user's mailbox.. here's the mail log entry I got from it:

<div class='quote'>Oct 30 07:31:51 junkroomserver sendmail[5431]: m9UDVpvE005431: from=vyoubaby, size=689, class=0, nrcpts=1, msgid=&lt;200810301331.m9UDVpvE005431@junkroomserver.hsd33.az.comcast.net&gt;, relay=vyoubaby@localhost
Oct 30 07:31:51 junkroomserver sendmail[5431]: m9UDVpvE005431: to=polybaby@polybaby.com, ctladdr=vyoubaby (1000/1000), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30689, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]</div>

Thanks Joe for your help both here and in your excellent book. It's nice that people actually respond on this forum and I have found it to be an invaluable resource in learning about servers.

Here's an update of what I've got going on..

I've discovered that Postfix should work just like sendmail for all my purposes.. and it's the obvious choice for my system since it seems to mostly work out of the box and is the default for both Ubuntu and Webmin.

Now I can both send mail and receive mail using Webmin's &quot;read user mail&quot; compose button. No problem, it's fast and reliable like it should be. Mail is delivered to any email address when sending and when receiving it sorts mail to the appropriate user as well. The problem now is that I can't get php scripts to use Postfix's sendmail command to deliver mail. I added the line,

[code:1]
sendmail_path = /usr/sbin/sendmail
[/code:1]
in apache's php.ini file and that part seems to be working. Problem is, whenever I send scripts through a script it bounces back as blacklisted by RBL as &quot;junk mail.&quot; The link in the bounce email takes me to a page telling me:

my.ip.xx.xx is not listed in the SBL

my.ip.xx.xx is listed in the PBL, in the following records:

* PBL191977

my.ip.xx.xx is not listed in the XBL

On that page there is a link telling me to contact my isp and get it removed, which I did, and which they sound like they're willing to do.. But I don't want to do it that way if possible. Since I know the system itself can send/receive email, I want it to be able to do this without contacting my isp if at all possible. What if I move the server? What if they decide to blacklist my ip again or if my (dynamic) ip changes.. will I have to do this again? I read somewhere that many isp's will block email sent from php scripts, but how can I get around this so as not to have to alert my isp that I have several servers running here? Is it possible? Again, it seems postfix will send mail natively but not via the sendmail command in a php script in a domain. Why do only my php scripts give me a PBL bounce but regular postfix works great?

After going through all configuration settings I could think of on my new install of Virtualmin, I noticed the setting in:

Webmin&gt;Virtulamin Virtual Servers&gt;Module Configuration&gt;Server Settings

Also update outgoing addresses for mailboxes? and changed this to &quot;yes&quot; based on the help file; what it says about, &quot;These are used to map Unix usernames to email addresses, and can be handy if users send email from scripts.&quot;.. so I am thinking this is all that's missing in my setup, or what might not be working for me. Anyway, when I enabled this feature, and re-checked Virtualmin's configuration and I got:

<div class='quote'>The status of your system is being checked to ensure that all enabled features are available, that the mail server is properly configured, and that quotas are active ..

BIND DNS server is installed, and the system is configured to use it.

No sender canonical map file for outgoing addresses was found in your Postfix configuration. You should either add the appropriate map to Postfix, or disable this feature in Virtualmin's module config page.</div>

It seems that canonical mapping is required for &quot;yes&quot; to be enabled on &quot;Also update outgoing addresses for mailboxes?&quot; but I don't know how to reliably set up the canonical mapping feature.

After researching on the internet, I edited:

/etc/postfix/main.cf

and added the lines:
[code:1]
sender_canonical_maps = hash:/etc/postfix/sender_canonical
canonical_maps = hash:/etc/postfix/canonical[/code:1]

and was able to re-check and refresh the Virtualmin configuration. So now the canonical maps thing I think is correct.

What about transport mapping? Can this help me?

I am not sure if I have done the above correctly. I'm still not able to end mail from scripts in domains but it feels like I am a lot closer now, thanks to people on this forum.

More information - I am sorry to keep posting more but I thought I should post the full message I get from the bounce. Comcast, my isp, tells me that I am not on their RBL. I did their RBL request form and it responded saying they can't remove my ip from the inbound rbl - keyword inbound, because it's not blocked, or they say:

Ref: PBL191977

98.192.0.0/11 is listed on the Policy Block List (PBL)

Outbound Email Policy of Comcast for this IP range:

Email sent by Comcast subscribers using a mail program such as Outlook Express are required to send the email through Comcast. To insure your mail program is properly configured, please visit http://www.comcast.net/help/faq/index.jsp?faq=Email117481. If you are a Comcast Commercial Services customer and need support, please contact support_biz@cable.comcast.com

Removal Procedure

Removal of IP addresses within this range from the PBL is not allowed by the netblock owner's policy.

About The PBL

The Spamhaus Policy Block List (&quot;PBL&quot;) is an international anti-spam system maintained by The Spamhaus Project in conjunction with Internet Service Providers and is used by Internet networks to enforce inbound email policies. The PBL database lists end-user IP address ranges which should not be delivering <b>unauthenticated</b> email to any mail server except those provided for specifically for that customer's use. The PBL lists only IP addresses (not domains or email addresses).

Keyword in above is unauthenticated. Could it be that I am able to send mail tdirectly through Webmin's read user mail interface because it's authenticated, but when using a php script it is not?

I am still hellbent on solving this and appreciate anyone who read through all of the above to help understand.

I logged onto the local machine, not through ssh but through a keyboard on the machine (is that ok too?) and when I ran:

sudo cat /etc/fstab | mail -s &quot;Test Email&quot; mytestemail@mytestdomain.tld

I got:

The program 'mail' can be found in the follwoing packages:
* mailx
* mailutils
Try sudo apt-get install &lt;selected package&gt;
-bash: mail: command not found

Should I install one or both of these?

ok, installed mailutils which I found out includes mailx..

When I send mail to the same myuser@mydomain.tld using

cat /etc/fstab | mail -s &quot;TestMessage&quot; myuser@mydomain.tld

I get the same message... but now I realize this is my mydomain.tld which has been generating this message.

I can send mail to gmail using this method but yahoo and many mail servers will refuse to talk to my mail server, giving the saem RBL message from spamhaus.org as above.

I can still send mail if I use WEbmin's &quot;read user mail&quot; compose button, but no scripts seem to be able to do it and not with fsstab from the command line.

what does that mean?

Update- I figured out something; I was testing to gmail from Webmin's read user mail module and to other domains using my php script... Now I realize that I cannot send mail to many domains because of being blocked, while others I can send mail to without a problem.

Is this an authentication issue? Suggestions on what to do now?

Ronald, Thanks but I need to be able to use Postfix's sendmail.. Most of my scripts use it exclusively and I don't want to rebuild all the sites around this problem. It's also not working when I try to use any form of mailer, ie; sendmail or smtp.. I have discovered my results are consistent and in fact I am in an RBL, a blocklist whether using smtp or sendmail, it does not matter.

I've seen some posts about using godaddy's mail or gmail's mail server by forwarding or routing mail to another mail server. Is this a good option for me? What about doing this for several domains? Getting Comcast to remove the blocklist entry does not look promising so far.

You're definitely right about the dynamic ip being within a range of blocked ip's. It all makes sense now. Finally. I should've noticed it only accepting a static ip, when setting up my dynamic DNS script and dns records.

<div class='quote'>Also, I noticed when reading through this thread again that you'd installed the mail relay module.</div>

- On a previous installation I installed a special (maybe even third party) Webmin sendmail relaying module.. Since then I have done a clean install with Postfix. So the Relaying module is gone. In Postfix, I added:

[code:1]
/etc/postfix/main.cf

added two lines:

sender_canonical_maps = hash:/etc/postfix/sender_canonical
canonical_maps = hash:/etc/postfix/canonical
[/code:1]

but didn't set anything up further, so I am thinking it's not affecting things. Are you saying this will cause problems for me?

<div class='quote'>Why not use your ISP? That's what the error message suggested you do. Seems like a good choice to me. But, yes, any other relay host is going to work</div>

- I never thought of that. I guess I probably have do access to mail there. I sort of prefer going with gmail, in case for example I move the server to another isp or location or something, then the gmail smtp forward is already in place. The other reason to consider gmail might be that it provides the possibility of the gmail web email tool for some domain users on my server - if they should want it. I don't know that using my isp's smtp server to relay has any benefits and when I looked through their help stuff they had a section on buying per relay stuff. I hardly use any email at all but I just don't like the idea of their limiting me and keeping me under their thumb in any way.

Maybe I will try them both. I am just relieved to have figured out the root of the problem and to learn that there's a solution that will work for me.

It's not an option.. Most of my scripts use the sendmail command exclusively.

However, I've learned that it's due to my being on a dynamic ip.

Problem resolved and will be relaying to gmail or other smtp mail server instead.