I have splunk set up to send mail when certain events happen, and the only mailserver (apparently) that it can use is sendmail. All I want to do is have sendmail forward mail on to our exchange server, roi-mail-01.theroi.com (resolves fine with nslookup), however I have been unable to do that and really need some help. I have in my sendmail.mc this line:
Which shows up in sendmail.cf as
I also have theroi.com added to relay-domains. However, when Sendmail tries to send out mail, I get these in /var/log/mail.log:
Nov 13 11:38:18 roi-compliance-01 sm-mta: mADGcI6u023421: <firstname.lastname@example.org>... User unknown
Nov 13 11:38:18 roi-compliance-01 sm-mta: mADGcI6u023421: from=<splunk@localhost>, size=3073, class=0,
nrcpts=0, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
And I never receive the mail. Any ideas?