sendmail will not relay, says ipv6 address is forged

I have two servers, both running sendmail 8.12.10 on
Linux, Fedora Core 1.

Both are fully ipv4 and ipv6 capable. Their fqdn names
resolve to both A and AAAA records. Their ipv4 and ipv6
addresses resolve back to the same fqdn names. ipv6
reverse lookups work perfectly, both for ip6.int and
ip6.arpa, nibble format and bitstring format.

One of the servers is an internal relay for Windows clients,
the other one has full internet access and relays to the
outside world.

The external relay server has the internal domain name
in /etc/mail/access, allowing to relay. I even added
the ipv6 address of the internal server in the external
server's access file.

Still, the external relay will not relay mail from
the internal server, when using ipv6. It says:

Relaying denied. IP name possibly forged
[IPv6:2001:888:188f:0:207:e9ff:fe1a:a80c]

Any idea?

Pim

On Fri, 23 Jan 2004 18:14:21 +0100, Pim Zandbergen
<(E-Mail Removed)> wrote:

>I have two servers, both running sendmail 8.12.10 on
>Linux, Fedora Core 1.
>
>Both are fully ipv4 and ipv6 capable. Their fqdn names
>resolve to both A and AAAA records. Their ipv4 and ipv6
>addresses resolve back to the same fqdn names. ipv6
>reverse lookups work perfectly, both for ip6.int and
>ip6.arpa, nibble format and bitstring format.
>
>One of the servers is an internal relay for Windows clients,
>the other one has full internet access and relays to the
>outside world.
>
>The external relay server has the internal domain name
>in /etc/mail/access, allowing to relay. I even added
>the ipv6 address of the internal server in the external
>server's access file.

What form of smtp address are you using?

On Fri, 23 Jan 2004 15:36:07 -0500, Peter Matulis <(E-Mail Removed)> wrote:


>What form of smtp address are you using?

Here's a full session up to the error message:

220 mondriaan.macroscoop.nl ESMTP Sendmail 8.12.10/8.12.10; Mon, 26
Jan 2004 19:47:51 +0100
EHLO rousseau.macroscoop.nl
250-mondriaan.macroscoop.nl Hello rousseau.macroscoop.nl
[IPv6:2001:888:188f:0:207:e9ff:fe1a:a80c] (may be forged), pleased to
meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5
250-DELIVERBY
250 HELP
MAIL From:<(E-Mail Removed)> SIZE=415
250 2.1.0 <(E-Mail Removed)>... Sender ok
RCPT To:<(E-Mail Removed)>
DATA
550 5.7.1 <(E-Mail Removed)>... Relaying denied. IP name possibly
forged [IPv6:2001:888:188f:0:207:e9ff:fe1a:a80c]

Thanks,
Pim

Pim Zandbergen wrote:

> Relaying denied. IP name possibly forged
> [IPv6:2001:888:188f:0:207:e9ff:fe1a:a80c]

Is that an IP address for which you want to allow relaying?
Please see:

http://www.sendmail.org/~ca/email/relayingdenied.html

If that doesn't solve your problems, post one or two related logfile
entries, tell us which of those hosts (to=, relay=) in the entries are
"yours" (or "trusted"), and list the anti-relay FEATUREs you use.
--
A: Maybe because some people are too annoyed by top-posting.
Q: Why do I not get an answer to my question(s)?
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?