did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

arbor

RHEL AS3，用sendmail配置邮件服务器

编辑 sendmail.mc文件，在其中加入以下几行：

TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=25,Name=MTA')dnl

注释出了
dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')

m4 sendmail.mc >; sendmail.cf； service sendmail restart

/usr/sbin/sendmail -d0.1 -bv root |grep SASL
输出:
NETUNIX NEWDB QUEUE SASL SCANF SMTP USERDB XDEBUG

[root@gly root]# telnet gly.domain.cn 25
Trying 192.168.70.100...
Connected to gly.domain.cn (192.168.70.100).
Escape character is '^]'.
220 gly.zzzx.net.cn ESMTP Sendmail 8.12.10/8.12.10; Thu, 20 Jan 2005 16:49:40 +0800
ehlo localhost
250-gly.domain.cn Hello [192.168.70.100], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH LOGIN PLAIN GSSAPI DIGEST-MD5 CRAM-MD5
250-DELIVERBY
250 HELP
quit

其他该做的工作都差不多了，用OE从另一台电脑做测试终端，收发邮件正常，可是选中SMTP认证后就反复出现输入用户名和密码的提示框，无法发信，收信正常，在‘工具’-‘帐号’-‘属性’-‘服务器‘-’发送邮件服务器’中选中‘我的服务器需要认证’
然后在‘登录用户帐号’上填上“用户名@服务器全称域名” 故障依旧，查看服务器邮件日志：

Jan 20 15:36:21 gly sendmail[3055]: j0K7aLcM003055: [192.168.10.29] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Jan 20 15:36:26 gly sendmail[3056]: j0K7aQcM003056: [192.168.10.29] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Jan 20 15:36:27 gly sendmail[3057]: j0K7aRcM003057: [192.168.10.29] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

关闭防火墙、在access文件中添加10.29这个IP，故障依旧

vi Sendmail.conf
把里面改成：pwcheck_method:pam

#vi /etc/pam.d/smtp
加入以下几行：
1.auth required /lib/security/pam_pwdb.so shadow md5
2.auth sufficient /lib/security/pam_listfile.so item=user sense=allow file=/etc/mail/smtpsuperusers.allow
3.auth required /lib/security/pam_listfile.so item=user sense=deny file=/etc/mail/smtpusers.deny
4.auth required /lib/security/pam_listfile.so item=group sense=allow file=/etc/mail/smtpgroup.allow

故障依旧

[root@gly root]# rpm -qa|grep pam
pam_smb-1.1.7-1
pam_krb5-1.70-1
spamassassin-2.55-3.1
pam-0.75-51
[root@gly root]# rpm -qa|grep sasl
cyrus-sasl-plain-2.1.15-3
cyrus-sasl-2.1.15-3
cyrus-sasl-gssapi-2.1.15-3
cyrus-sasl-md5-2.1.15-3
[root@gly root]#

从baidu和google里面搜索了一些资料，认为是连接后客户端不再向服务器发送MAIL/EXPN/VRFY/ETRN之类的请求。

综合判断为SMTP认证问题，可是不知道问题出在哪里，请大侠看看，谢谢！

abel

sendmail FAQ 上有寫

arbor

http://www.sendmail.org/faq/

这里吗？好象没有找到，能再具体一点吗？谢谢！

abel

4.18

你若有時間,不妨早個時間都把它看完

arbor

谢谢abel！

可是本人愚笨，又是英文，没看懂多少。

换了Postfix还是无法认证：

[lsg@student lsg]$ telnet gly.ourdomain.cn 25
Trying 192.168.70.100...
Connected to gly.ourdomain.cn (192.168.70.100).
Escape character is '^]'.
220 gly.ourdomain.cn ESMTP Postfix
ehlo localhost
250-gly.ourdomain.cn
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH PLAIN LOGIN GSSAPI DIGEST-MD5 CRAM-MD5
250-XVERP
250 8BITMIME
quit
221 Bye
Connection closed by foreign host.
[lsg@student lsg]$

发邮件认证失败的日志：

[root@gly sasl2]# tail /var/log/maillog
Jan 28 16:17:03 gly postfix/postfix-script: starting the Postfix mail system
Jan 28 16:17:03 gly postfix/master[3728]: daemon started -- version 2.0.11
Jan 28 16:17:07 gly postfix/smtpd[3733]: connect from unknown[192.168.70.253]
Jan 28 16:17:07 gly postfix/smtpd[3733]: warning: SASL authentication problem: unknown password verifier
Jan 28 16:17:07 gly postfix/smtpd[3733]: warning: unknown[192.168.70.253]: SASL LOGIN authentication failed
Jan 28 16:17:08 gly postfix/smtpd[3733]: disconnect from unknown[192.168.70.253]
Jan 28 16:17:09 gly postfix/smtpd[3733]: connect from unknown[192.168.70.253]
Jan 28 16:17:09 gly postfix/smtpd[3733]: warning: SASL authentication problem: unknown password verifier
Jan 28 16:17:09 gly postfix/smtpd[3733]: warning: unknown[192.168.70.253]: SASL LOGIN authentication failed
Jan 28 16:17:10 gly postfix/smtpd[3733]: disconnect from unknown[192.168.70.253]

如果不用认证发邮件是可以的。

我怀疑是和SASL有关系，呵呵，从日志里面看到的，可是不知道问题出在哪里。

[root@gly sasl2]# rpm -qa|grep sasl
cyrus-sasl-plain-2.1.15-3
cyrus-sasl-2.1.15-3
cyrus-sasl-gssapi-2.1.15-3
cyrus-sasl-md5-2.1.15-3
[root@gly sasl2]#

arbor

也许和sasl版本有关系，我的是sasl2

[root@gly sasl2]# /usr/sbin/sendmail -d0.1 -bv root |grep SASL
                NETUNIX NEWDB NIS PIPELINING SASLv2 SCANF STARTTLS TCPWRAPPERS
[root@gly sasl2]#

[root@gly sasl2]# rpm -qa|grep sasl
cyrus-sasl-plain-2.1.15-3
cyrus-sasl-2.1.15-3
cyrus-sasl-gssapi-2.1.15-3
cyrus-sasl-md5-2.1.15-3
[root@gly sasl2]#

救急啊！！！

llylin

我的问题跟楼主一样，也是AS3+sendmail，SMTP总是无法认证，救急啊。。。

huanghua_919

我还是没有处理掉
用的是LINUX带的工具
有时可以收
但现在不可以了

。。。。
求教

urey_pp

可以参考：http://www.sendmail.com/sm/open_ ... ral_issues_faq/#4.8
关键是“Unless this happens very often, you can ignore this. If it happens very often, it's either someone playing around or it's a network problem.”这句。如果偶尔发生则可以忽略，如果经常发生那肯定是有人在捉弄你或者是一个网络问题。
What does "NOQUEUE: Null connection from ..." mean?
An entry like:

NOQUEUE: Null connection from host.domain [IP.AD.DD.RESS]
   
in the logfile means that host.domain connected to your MTA but neither initiated transmission of a message (by issuing the MAIL command), nor used any of the commands that are logged separately (EXPN/VRFY/ETRN). Unless this happens very often, you can ignore this. If it happens very often, it's either someone playing around or it's a network problem.

Note 1: The significant part of the message isn't the NOQUEUE, but the "Null connection from ...". In particular, NOQUEUE isn't an error indication, but just a "place-holder" when no queue ID has been assigned, typically because message collection hasn't started (yet). It can occur in other messages too, and there too the significant part is what comes after the NOQUEUE.

Note 2: In 8.10, the text which led to the confusion has been changed to: "... did not issue MAIL/EXPN/VRFY/ETRN during connection to ...".