have a problem with pop3 protocol in sendmail

[Timur]

I have installed sendmail and configured it. Also added users to my linux mail server. After that I have sent a message from root to another user. That user tried to download this message within the same LAN, however, it never worked. I looked at my /etc/xinetd.d/ipop3 file and changed

disable = yes

to

disable = no

and restarted xinetd.

It did not work anyway. My pop server is not responding.
Please, help me.

[dragoncity99]

Hello there friend,

   Please state ur Linux distro and tell us a bit of ur network environment.

[Timur]

RHL 8. Linux box has one network interface (eth0) with internal IP address 192.168.0.200. ADSL modem connected to routers. Another PC, which is inside the LAN has a static IP address. SMTP works just fine, because we managed to send email messages to other email accounts, using newly configured mailserver (sendmail), but we could not receive mail because of POP protocol malfunctioning.

[dragoncity99]

This Questions might help u.

1. Have u started the POP3 service?
---->Please type "setup" and choose "services" in command prompt. Make sure it is POP3 service and not any other POP services.

2. Did u start IMAP service as well?
----> This must not run at the same time with POP3.

3. Have u configured "sendmail.mc" macro file and recompile it?
--->U are actually sending mail via its "loopback" interface, and not to other users physically via LAN.

I thinkSMTP service is running but actually not in LAN as i read ur post. So i put question 3 just for future configuration.

[Timur]

I have started pop3 and imap.
Let me post my sendmail.mc file, so that you can take a look at it and tell me what is wrong.

divert(-1)
dnl This is the sendmail macro config file. If you make changes to this file,
dnl you need the sendmail-cf rpm installed and then have to generate a
dnl new /etc/mail/sendmail.cf by running the following command:
dnl
dnl        m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
dnl
include(`/usr/share/sendmail-cf/m4/cf.m4')
VERSIONID(`linux setup for Red Hat Linux')dnl
OSTYPE(`linux')
dnl Uncomment and edit the following line if your mail needs to be sent out
dnl through an external mail server:
dnl define(`SMART_HOST',`smtp.your.provider')
define(`confDEF_USER_ID',``8:12'')dnl
undefine(`UUCP_RELAY')dnl
undefine(`BITNET_RELAY')dnl
dnl define(`confAUTO_REBUILD')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST',true)dnl
define(`confDONT_PROBE_INTERFACES',true)dnl
define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl
define(`ALIAS_FILE', `/etc/aliases')dnl
dnl define(`STATUS_FILE', `/etc/mail/statistics')dnl
define(`UUCP_MAILER_MAX', `2000000')dnl
define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
define(`confAUTH_OPTIONS', `A')dnl
dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl define(`confCACERT_PATH',`/usr/share/ssl/certs')
dnl define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
dnl define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
dnl define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')
dnl define(`confTO_QUEUEWARN', `4h')dnl
dnl define(`confTO_QUEUERETURN', `5d')dnl
dnl define(`confQUEUE_LA', `12')dnl
dnl define(`confREFUSE_LA', `18')dnl
define(`confTO_IDENT', `0')dnl
dnl FEATURE(delay_checks)dnl
FEATURE(`no_default_msa',`dnl')dnl
FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl

FEATURE(masquerade_entire_domain)dnl
FEATURE(masquerade_envelope)dnl
FEATURE(allmasquerade)dnl
MASQUERADE_AS('ftm.uz')dnl
MASQUERADE_DOMAIN('ftm.uz.')dnl
MASQUERADE_DOMAIN(localhost)dnl
MASQUERADE_DOMAIN(localhost.localdomain)dnl
EXPOSED_USER('root')dnl

FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
dnl The '-t' option will retry delivery if e.g. the user runs over his quota.
FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`blacklist_recipients')dnl
EXPOSED_USER(`root')dnl
dnl This changes sendmail to only listen on the loopback device 127.0.0.1
dnl and not on any other network devices. Comment this out if you want
dnl to accept email over the network.
dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')
dnl NOTE: binding both IPv4 and IPv6 daemon to the same port requires
dnl       a kernel patch
dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')
dnl We strongly recommend to comment this one out if you want to protect
dnl yourself from spam. However, the laptop and users on computers that do
dnl not have 24x7 DNS do need this.
dnl FEATURE(`accept_unresolvable_domains')dnl
dnl FEATURE(`relay_based_on_MX')dnl
MAILER(smtp)dnl
MAILER(procmail)dnl
Cwlocalhost.localdomain

[dragoncity99]

Everything is fine except this line as i mentioned in question 3.

dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')
change the Addr=127.0.0.1 to ur server's IP address (192.168.0.200 rite?)


So have u started sendmail service? Have u started "ipop3" and "pop3s" service? Please do so.

Are u retrieving mails on a windows machine? If yes, then make sure u are entering ur server's ip address and not a hostname.

[Timur]

Yes, man. I have started pop3s, ipop3 and sendmail. And also in my sendmail.mc file I changed 127.0.0.1 to 192.168.0.200
Do I have to remove "dnl" at the beginning of this line?
After everything I generated my .cf file and restarted sendmail.
It did not work anyway, man.
Ye, we are using outlook express on our windows machines and assigning IP address not the hostname.

[dragoncity99]

No, u don't need to remove it. All u need to do is just change the ip address to make it to send mail either internet/intranet depend on ur config.

Did u compile it? This command: "make -C /etc/mail"

oh yes, my mistake. I forgot to tell u that u need to change the "access" file in /etc/mail.
U need to relay to ur server's ip address.
How? open "access" file with vi and add two new lines below:

1. ur server's hostname and mail server's ip address followed by the word "RELAY" that is
============================
richard.sybex.com                   RELAY
192.168.1.1                            RELAY
===========================

that's for me. and for u

===========================
XXXXXXXX                           RELAY
192.168.0.200                      RELAY
===========================

Later, quite from this /etc/mail directory.

Compile the whole directory using command: "make -C /etc/mail"
lastly restart ur sendmail:
"/etc/init.d/sendmail restart"

[Timur]

Do I have to enter

root.mydomain.com
192.168.0.200

in my case?

Here is my access file:

# Check the /usr/share/doc/sendmail/README.cf file for a description
# of the format of this file. (search for access_db in that file)
# The /usr/share/doc/sendmail/README.cf is part of the sendmail-doc
# package.
#
# by default we allow relaying from localhost...
#localhost.localdomain      RELAY
#localhost            RELAY
#127.0.0.1            RELAY
#192.168.0.202         RELAY
#192.168.0.204         RELAY
#192.168.0.205         RELAY
root.ftm.uz            RELAY
192.168.0.200         RELAY

[dragoncity99]

Yes, that's right. But uncomment the line for:

localhost RELAY
127.0.0.1 RELAY

Meaning, remove the leading "#" in front of the specified lines

[Timur]

Hello my Friend!

Man, I did everything as you told me to. It ain't working. I stil can't receive messages from Linux box (sendmail). pop3s, ipop3 started. imap is stopped. No other pop services are running.
Maybe I should give you my conf files?

[dragoncity99]

Ok, just mail it to me at :dragoncity99@hotmail.com

Do u implement iptables?

Is ur network using static ips or dhcp?

Oh yes, u have to test to make sure that ur Linux can listen on port 110.
Telnet ur mail server on port 110.
(Command: telnet ur servername/ip address 110)

If it refuse to connect then it means ur mail server refuse to listen to listen on that port and the pop3 mails will never go out at all. Better do something about it.

[Timur]

Man, it's not telneting port 110. Maybe that is the reason. You know, I have squid on this server and it runs in transparent mode. I added some rules to made it transparent and did some NAT stuff. I'm sending conf files to you via email and also my rc.nat file.

[dragoncity99]

For a time being, make squid to allow port 110 to be accessible to all clients. I will go through ur scrripts slowly 10Q