Sendmail mit AUTH bei 1und1

[catadm]

Hallo,

Folgendes Problem: Nach absturz der sendmail.mc musste ich eine 'neue' erstellen.
(Nur um Kommentaren vorzubeugen: JA, ich will sendmail benutzen, JA, es hat schon funktioniert, NEIN ich will wenn möglich kein postfix einführen.... ;-)

Jetzt funktioniert das Anmelden an 1u1 smtp.1und1.com trotz richtigen passworts/user (mit outlook getestet) nicht mehr.

Meldung tail -f /var/log/maillog ; level 20)

Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, start=ok
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, info: fds=11/10, err=2
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS: TLS cert verify: depth=0 /C=DE/ST=Rheinland-Pfalz/L=Montabaur/O=1 und 1 Internet Limited/CN=smtp.1und1.com, state=0, reason=unable to get local issuer certificate
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, info: fds=11/10, err=2
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, get_verify: 20 get_peer: 0x9c2e290
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, relay=smtp.1und1.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DES-CBC3-SHA, bits=168/168
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, cert-subject=/C=DE/ST=Rheinland-Pfalz/L=Montabaur/O=1+20und+201+20Internet+20Limited/CN=smtp.1und1.com, cert-issuer=/C=US/O=Equifax/OU=Equifax+20Secure+20Certificate+20Authority, verifymsg=unable to get local issuer certificate
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=read, info: fds=11/10, err=2
Aug 18 07:12:59 linkls1 last message repeated 2 times
Aug 18 07:12:59 linkls1 sendmail[12237]: AUTH=client, relay=smtp.1und1.com., mech=PLAIN, bits=0
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=read, info: fds=11/10, err=2
Aug 18 07:12:59 linkls1 last message repeated 2 times
Aug 18 07:12:59 linkls1 sendmail[12237]: STARTTLS=client, SSL_shutdown not done
Aug 18 07:12:59 linkls1 sendmail[12237]: k7I4MRbV011117: to=<thomas.kloos@kloos-sys.de>, ctladdr=<root@linkls1.kloos-sys.local> (0/0), delay=00:50:32, xdelay=00:00:00, mailer=relay, pri=49342, relay=smtp.1und1.com. [212.227.15.129], dsn=4.0.0, stat=Deferred: 421 dns lookup failed for sender domain

Hier die Einträge in der sendmail.mc:

divert(-1)dnl
dnl #
dnl # This is the sendmail macro config file for m4. If you make changes to
dnl # /etc/mail/sendmail.mc, you will need to regenerate the
dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is
dnl # installed and then performing a
dnl #
dnl #     make -C /etc/mail
dnl #
include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
VERSIONID(`setup for Red Hat Linux')dnl
OSTYPE(`linux')dnl
define(`SMART_HOST',`smtp.1und1.com')
FEATURE(`authinfo', `hash -o /etc/mail/authinfo.db')dnl
define(`confDEF_USER_ID',``8:12'')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST',true)dnl
define(`confDONT_PROBE_INTERFACES',true)dnl
define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl
define(`ALIAS_FILE',`/etc/mail/aliases')
define(`STATUS_FILE', `/etc/mail/statistics')dnl
define(`UUCP_MAILER_MAX', `2000000')dnl
define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
TRUST_AUTH_MECH(`EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `PLAIN')dnl
define(`confCACERT_PATH', `/usr/share/ssl/certs')dnl
define(`confCACERT', `/usr/share/ssl/certs/cacert.pem')dnl
define(`confSERVER_CERT', `/usr/share/ssl/certs/sendmail.pem')dnl
define(`confSERVER_KEY', `/usr/share/ssl/certs/sendmail.pem')dnl
define(`confAUTH_OPTIONS', `A p')dnl
define(`confTO_IDENT', `0')dnl
FEATURE(`no_default_msa',`dnl')dnl
FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
FEATURE(redirect)dnl
FEATURE(always_add_domain)dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl
FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`blacklist_recipients')dnl
EXPOSED_USER(`root daemon')dnl
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
FEATURE(`accept_unresolvable_domains')dnl
FEATURE(`relay_based_on_MX')dnl
LOCAL_DOMAIN(`localhost.localdomain')dnl
MASQUERADE_AS(`kloos-sys.com')dnl
FEATURE(masquerade_envelope)dnl
FEATURE(masquerade_entire_domain)dnl
MASQUERADE_DOMAIN(localhost)dnl
MASQUERADE_DOMAIN(localhost.localdomain)dnl
MASQUERADE_DOMAIN(kloos-sys.de)dnl
MASQUERADE_DOMAIN(kloos-sys.local)dnl
MASQUERADE_DOMAIN(linkls1.kloos-sys.local)dnl
INPUT_MAIL_FILTER(`avmilter',`S=inet:3333@localhost,F=R,T=S:10m;R:10m;E:10m')
FEATURE(`dnsbl',`relays.ordb.org',`"550 Email Rejected ue to sending server misconfiguration - see http://www.ordb.org/faq/\#why_rejected"')dnl
FEATURE(`dnsbl',`proxies.blackholes.easynet.nl',`"550 5.7.1 ACCESS DENIED to OPEN PROXY SERVER "${client_name}" by easynet.nl DSNBL (http://proxies.blackholes.easynet.nl/errors.html)"', `')dnl
FEATURE(`dnsbl',`sbl.spamhaus.org',`Rejected - see http://spamhaus.org/')dnl
FEATURE(dnsbl,`blackholes.mail-abuse.org',
` Mail from $&{client_addr} rejected; see http://mail-abuse.org/cgi-bin/lookup?$& {client_addr}')dnl
FEATURE(dnsbl,`dialups.mail-abuse.org',
` Mail from dial-up rejected; see http://mail-abuse.org/dul/enduser.htm')dnl
FEATURE(`delay_checks')dnl
FEATURE(`generics_entire_domain')dnl
FEATURE(`local_procmail')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`nouucp',`reject')dnl
FEATURE(`use_cw_file')dnl
FEATURE(`virtuser_entire_domain')dnl
define(`confDEF_CHAR_SET', `iso-8859-1')dnl
define(`confMAX_MESSAGE_SIZE', `15000000')dnl Denial of Service Attacks
define(`confMAX_DAEMON_CHILDREN', `30')dnl Denial of Service Attacks
define(`confCONNECTION_RATE_THROTTLE', `2')dnl Denial of Service Attacks
define(`confMAXRCPTSPERMESSAGE', `50')dnl Denial of service Attacks
define(`confSINGLE_LINE_FROM_HEADER', `True')dnl
define(`confSMTP_LOGIN_MSG', `$j')dnl
define(`confDONT_PROBE_INTERFACES', `True')dnl
define(`confTO_INITIAL', `6m')dnl
define(`confTO_HELO', `5m')dnl
define(`confTO_HOSTSTATUS', `2m')dnl
define(`confTO_DATAINIT', `6m')dnl
define(`confTO_DATABLOCK', `35m')dnl
define(`confTO_DATAFINAL', `35m')dnl
define(`confDIAL_DELAY', `20s')dnl
define(`confNO_RCPT_ACTION', `add-apparently-to')dnl
define(`confALIAS_WAIT', `0')dnl
define(`confMAX_HOP', `35')dnl
define(`confQUEUE_LA', `5')dnl
define(`confREFUSE_LA', `12')dnl
define(`confSEPARATE_PROC', `False')dnl
define(`confCON_EXPENSIVE', `true')dnl
define(`confWORK_RECIPIENT_FACTOR', `1000')dnl
define(`confWORK_TIME_FACTOR', `3000')dnl
define(`confQUEUE_SORT_ORDER', `Time')dnl
define(`confPRIVACY_FLAGS', `authwarnings,goaway,restrictmailq,restrictqrun,needmailhelo')dnl
MAILER(smtp)dnl
MAILER(local)dnl
MAILER(procmail)dnl
define(`confLOG_LEVEL',20)

Irgendwelche ideen??