From Newsgroup: comp.mail.sendmail

Hello!

I am currently testing the Debian CDB builds.

Version 8.18.1
Compiled with: DANE HAVE_SSL_CTX_dane_enable MAX_TLSA_RR=64 DNSMAP
IPV6_FULL LDAPMAP LDAP_NETWORK_TIMEOUT LDAP_REFERRALS
LOG MAP_REGEX MATCHGECOS MAXDAEMONS=64 MILTER MIME7TO8 MIME8TO7
NAMED_BIND NETINET NETINET6 NETUNIX NEWDB=5.3 CDB=2 NIS
NISPLUS PIPELINING SASLv2 SCANF SOCKETMAP STARTTLS TCPWRAPPERS TLS_EC
TLS_VRFY_PER_CTX USERDB USE_LDAP_INIT XDEBUG
OS Defines: ADDRCONFIG_IS_BROKEN HASFCHOWN HASFCHMOD HASFLOCK
HASGETDTABLESIZE HAS_GETHOSTBYNAME2 HASGETUSERSHELL
HASINITGROUPS HASLSTAT HASNICE HASRANDOM HASRRESVPORT
HASSETREGID HASSETREUID HASSETRLIMIT HASSETSID
HASSETVBUF HASURANDOMDEV HASSTRERROR HASUNAME HASUNSETENV HASWAITPID
IDENTPROTO IP_SRCROUTE NEEDSGETIPNODE REQUIRES_DIR_FSYNC
SFS_VFS USE_DOUBLE_FORK USE_SIGLONGJMP USESETEUID
Kernel symbols: /boot/vmlinux
Conf file: /etc/mail/submit.cf (default for MSP)
Conf file: /etc/mail/sendmail.cf (default for MTA)
Pid file: /var/run/sendmail/mta/sendmail.pid (default)
libsm Defines: SM_CONF_LDAP_INITIALIZE SM_CONF_LDAP_MEMFREE
SM_CONF_LONGLONG SM_CONF_MEMCHR SM_CONF_MSG SM_CONF_SEM
SM_CONF_SIGSETJMP SM_CONF_SHM SM_CONF_SSIZE_T
SM_CONF_STDBOOL_H SM_CONF_STDDEF_H SM_CONF_SYS_CDEFS_H SM_CONF_UID_GID
DO_NOT_USE_STRCPY SM_HEAP_CHECK SM_OS=sm_os_linux
SM_VA_STD FFR Defines: _FFR_BADRCPT_SHUTDOWN _FFR_MAIL_MACRO
_FFR_MTA_STS _FFR_NO_PIPE _FFR_QUEUE_SCHED_DBG _FFR_REJECT_NUL_BYTE
_FFR_RESET_MACRO_GLOBALS _FFR_RHS _FFR_SHM_STATUS
_FFR_SKIP_DOMAINS _FFR_TLS_ALTNAMES _FFR_M_ONLY_IPV4
Canonical name: deb-test.dorfdsl.de
UUCP nodename: deb-test.dorfdsl.de
a.k.a.: [IPv6:2a01:170:118f:2:0:0:0:f888]
Conf file: /etc/mail/submit.cf (selected)
Pid file: /var/run/sendmail/msp/sendmail.pid (selected)


I have:
root@deb-test:~# cdb -d /etc/mail/access.db
+11,5:Connect:127->RELAY
+14,1:GreetPause:127->0
+14,1:ClientRate:127->0
+14,1:ClientConn:127->0
+16,5:Connect:IPv6:::1->RELAY
+14,5:Connect:10.0.0->RELAY
+19,1:GreetPause:IPv6:::1->0
+19,1:ClientRate:IPv6:::1->0
+19,1:ClientConn:IPv6:::1->0
+11,4:GreetPause:->5000
+11,2:ClientRate:->10
+11,2:ClientConn:->10
+16,6:Spam:postmaster@->FRIEND
+11,6:Spam:abuse@->FRIEND
+10,6:Spam:spam@->FRIEND
+7,6:reject@->REJECT
+21,46:From:googlegroups.com->ERROR:5.7.1:554 Google Groups not allowed
here +20,54:From:www.example.org->ERROR:5.7.1:554 www.example.org spam
not accepted here +16,50:From:example.org->ERROR:5.7.1:554 example.org
spam not accepted here +15,6:Connect:169.254->REJECT +15,6:Connect:192.0.2->REJECT
+11,6:Connect:224->REJECT
+11,6:Connect:255->REJECT

root@deb-test:~# grep ^K /etc/mail/sendmail.cf
Kresolve host -a<OKR> -T<TEMP>
Karith arith
Kmacro macro
Kdequote dequote
Kaccess cdb -T<TMPF> /etc/mail/access
root@deb-test:~#

The file access seems to work, I checked with auditd and also added
entries (without colons) that worked.

So I assumed that the following works, but the stuff with the colons
does not seem to work:

root@deb-test:~# sendmail -bt
ADDRESS TEST MODE (ruleset 3 NOT automatically invoked)
Enter <ruleset> <address>

/map access Connect:IPv6:::1

map_lookup: access (Connect:IPv6:::1) no match (0)

/map access reject@

map_lookup: access (reject@) returns REJECT (0)

/map access Connect:192.0.2

map_lookup: access (Connect:192.0.2) no match (0)

On other Debian systems with db5.3, such lookups work.

What are I am doing wrong here?
--
kind regards
Marco

Send spam to 1769946177muell@stinkedores.dorfdsl.de

--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Marco Moock <mm@dorfdsl.de> wrote:

On other Debian systems with db5.3, such lookups work.

What are I am doing wrong here?

No idea, but I just observed similar results on Fedora 43
having Sendmail 8.18.1 and tinycdb 0.80-5.

Maybe you should consider OpenLDAP or 389ds after all. Yes,
it may take some time to do the initial setup but it is not
that difficult.

br,
KK
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:

Marco Moock <mm@dorfdsl.de> wrote:

On other Debian systems with db5.3, such lookups work.

What are I am doing wrong here?

No idea, but I just observed similar results on Fedora 43
having Sendmail 8.18.1 and tinycdb 0.80-5.

Okay, I did some testing and checking. I found out that
Sendmail does cbd_find() with e.g. key like this:

connect:127.0.0.1

Note the lower case 'c'. That is why lookups fail.

I have no time to investigate this any further and I am too
stupid anyway, but it seems like a Sendmail bug related to
cdb maps.

As a workaround, use lowercase cbd map keys.

br,
KK
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:

Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:

Marco Moock <mm@dorfdsl.de> wrote:

On other Debian systems with db5.3, such lookups work.

What are I am doing wrong here?

No idea, but I just observed similar results on Fedora 43
having Sendmail 8.18.1 and tinycdb 0.80-5.

Okay, I did some testing and checking. I found out that
Sendmail does cbd_find() with e.g. key like this:

connect:127.0.0.1

Note the lower case 'c'. That is why lookups fail.

I have no time to investigate this any further and I am too
stupid anyway, but it seems like a Sendmail bug related to
cdb maps.

As a workaround, use lowercase cbd map keys.

Now I figured it out! I guess this a feature after all and
not a Sendmail bug.

The crucial clue is in the makemap(8) man page:

#################################################################
-f Normally all upper case letters in the key are folded to
lower case. This flag disables that behaviour. This is
intended to mesh with the -f flag in the K line in sendmail.cf.
The value is never case folded. #################################################################

So when you use makemap with BerkeleyBD/OracleDB, it automatically
downcases all the keys when it builds databases. With CDB, you
must use something like this to create databases. The following
works with bash:

cdb -c -m access.db.cdb <(tr A-Z a-z < access)

br,
KK
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Kalevi Kolttonen <kalevi@kolttonen.fi> wrote:

With CDB, you must use something like this to create
databases. The following works with bash:

cdb -c -m access.db.cdb <(tr A-Z a-z < access)

Aargh, sorry, that is buggy because it downcases everything,
including the database values. This should work correctly:

cdb -c -m access.db.cdb <(awk '{print tolower($1) " " $2}' access)

br,
KK
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Kalevi Kolttonen wrote:

So when you use makemap with BerkeleyBD/OracleDB, it automatically
downcases all the keys when it builds databases. With CDB, you
must use something like this to create databases. The following

Why don't you simply use makemap?

--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Marco Moock wrote:

root@deb-test:~# cdb -d /etc/mail/access.db
+11,5:Connect:127->RELAY

How did you generate the map?

Did you use makemap?
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

Claus A|fmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> wrote:

Why don't you simply use makemap?

Sorry! I did not realize it supports cdb too.

br,
KK
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: comp.mail.sendmail

On 02.02.2026 03:05 Uhr Claus A|fmann wrote:

Marco Moock wrote:

root@deb-test:~# cdb -d /etc/mail/access.db
+11,5:Connect:127->RELAY

How did you generate the map?

Did you use makemap?

No, I did use
cdb -m -c /etc/mail/access.db /etc/mail/access
That doesn't change the LHS to lower case, which was the issue.
--
kind regards
Marco
Send spam to 1769997932muell@stinkedores.dorfdsl.de
--- Synchronet 3.21b-Linux NewsLink 1.2