does your mail system work if you disable pf ?
first step is to determine if the issue comes from pf blocking something
or from smtpd not doing what you think it does
On Thu, Jun 05, 2014 at 01:00:55PM +0200, zoran wrote:
> This is my first mail server ever, i choose opensmtpd because its looks
> very simple but i guess i made it complicated, i manage to receive mail
> from gmail but i cant send the mail. I'm running opensmtpd with dovecot
> on openbsd 5.5 where is my dns server too...i'll include my smtpd.conf
> and pf.conf so i hope somebody will give me advice how to fix this
> problem for which i will be very thankful!
>
> pf.conf
>
>
> pass in on $ext_if inet proto udp to $ext_if port $udp_services rdr-to
> $comp2
> pass in log on $int_if inet proto udp from $int_if:network to $ext_if
> port $udp_services rdr-to $comp2
> match out log on $int_if proto udp from $int_if:network to $comp2 port
> $udp_services nat-to $int_if
> pass on $int_if inet proto udp to $comp2 port $udp_services
>
>
> match in on $ext_if proto tcp to $ext_if port $email rdr-to $emailserver
> pass proto tcp from any to $emailserver port $email
> pass proto tcp from $emailserver to any port $email
>
> pass in on $ext_if inet proto tcp to $ext_if port $email rdr-to $emailserver
> pass in log on $int_if inet proto tcp from $int_if:network to $ext_if
> port $email rdr-to $emailserver
> match out log on $int_if proto tcp from $int_if:network to $emailserver
> port $email nat-to $int_if
> pass on $int_if inet proto tcp to $emailserver port $email
>
> smtpd.conf
>
> 1 pki mail.tcpudp.org certificate "/etc/mail/certs/mail.tcpudp.org.crt"
> 2 pki mail.tcpudp.org key "/etc/mail/certs/mail.tcpudp.org.key"
> 3
> 4 listen on lo0 port 10025 tag Filtered
> 5 listen on lo0 port 10027 tag Signed
> 6
> 7 listen on egress port 587 tls-require pki mail.tcpudp.org
> 8 listen on egress port 25 tls pki mail.tcpudp.org
> 9
> 10 table aliases db:/etc/mail/aliases.db
> 11 table secrets db:/etc/mail/secrets.db
> 12 table domains { tcpudp.org, "*.tcpudp.org" }
> 13 accept from source X.X.X.10 for any relay
> 14 accept from source X.X.X.11 for any relay
> 15
> 16 #accept from any for domain tcpudp.org relay via smtp://127.0.0.1:10024
> 17 #accept for any relay via smtp://127.0.0.1:10026
> 18 accept tagged Filtered for any alias <aliases> deliver to maildir
> "/home/Maildir"
> 19 accept from any for domain tcpudp.org deliver to maildir "/home/Maildir"
> 20 accept from any for domain tcpudp.org relay via
> tls+auth://label@zo...@tcpudp.org:587 auth <secrets>
> 21 accept from local for any relay
>
>
>
> # smtpd -dv -T smtp
> debug: init ssl-tree
> info: loading pki information for mail.tcpudp.org
> info: OpenSMTPD 5.4.2 starting
> debug: bounce warning after 4h
> debug: using "fs" queue backend
> debug: using "ramqueue" scheduler backend
> debug: using "ram" stat backend
> info: startup [debug mode]
> debug: parent_send_config_ruleset: reloading
> mfa: building simple chains...
> debug: parent_send_config_mfa: reloading
> mfa: building complex chains...
> debug: parent_send_config: configuring smtp
> mfa: done building complex chains
> mfa: done building default chain
> debug: smtp: listen on 192.168.0.11 port 25 flags 0x1 pki "mail.tcpudp.org"
> debug: mfa ready
> debug: smtp: listen on IPv6:fe80::226:18ff:fee7:790b%re0 port 25 flags
> 0x1 pki "mail.tcpudp.org"
> debug: smtp: listen on 192.168.0.11 port 587 flags 0x21 pki
> "mail.tcpudp.org"
> debug: smtp: listen on IPv6:fe80::226:18ff:fee7:790b%re0 port 587 flags
> 0x21 pki "mail.tcpudp.org"
> debug: smtp: listen on 127.0.0.1 port 10027 flags 0x0 pki ""
> debug: smtp: listen on IPv6:fe80::1%lo0 port 10027 flags 0x0 pki ""
> debug: smtp: listen on IPv6:::1 port 10027 flags 0x0 pki ""
> debug: smtp: listen on 127.0.0.1 port 10025 flags 0x0 pki ""
> debug: smtp: listen on IPv6:fe80::1%lo0 port 10025 flags 0x0 pki ""
> debug: smtp: listen on IPv6:::1 port 10025 flags 0x0 pki ""
> debug: smtp: will accept at most 497 clients
> debug: smtpd: scanning offline queue...
> debug: smtpd: offline scanning done
> debug: queue: done loading queue into scheduler
> debug: scheduler: evp:5eadde3e381a9df0 scheduled (mta)
> debug: mta: received evp:5eadde3e381a9df0 for <r...@mail.tcpudp.org>
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying MX for [relay:mail.tcpudp.org]...
> debug: mta: [relay:mail.tcpudp.org] waiting for MX
> debug: MXs for domain mail.tcpudp.org:
> 77.105.40.98 preference 0
> debug: mta: ... got mx (0x7af6ec10, mail.tcpudp.org,
> [relay:mail.tcpudp.org])
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: new [connector:[]->[relay:mail.tcpudp.org],0x10000]
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta-routing: searching new route for
> [connector:[]->[relay:mail.tcpudp.org],0x0]...
> debug: mta-routing: selecting candidate route [] <-> 77.105.40.98
> debug: mta-routing: spawning new connection on [] <-> 77.105.40.98
> debug: mta: 0x7dcbdf00: spawned for relay [relay:mail.tcpudp.org]
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta: cannot use [relay:mail.tcpudp.org] before 2s
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org],0x0]: must wait a bit
> debug: mta: retrying to connect on
> [connector:[]->[relay:mail.tcpudp.org],0x0] in 2s...
> debug: mta: draining [relay:mail.tcpudp.org] refcount=3, ntask=1,
> nconnector=1, nconn=1
> debug: mta: scheduling relay [relay:mail.tcpudp.org] in 1s...
> smtp-out: Connecting to smtp+tls://77.105.40.98:25 (ns1.tcpudp.org) on
> session 16091b67092aaaa9...
> debug: mta: 0x7dcbdf00: IO error: Connection refused
> smtp-out: Error on session 16091b67092aaaa9: IO Error: Connection refused
> debug: mta: 0x7dcbdf00: session done
> debug: mta_route_collect([] <-> 77.105.40.98 (ns1.tcpudp.org))
> smtp-out: Disabling route [] <-> 77.105.40.98 (ns1.tcpudp.org) for 800s
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x20000]
> debug: mta: canceling connector timeout
> debug: mta: cannot use [relay:mail.tcpudp.org] before 2s
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org],0x20000]: must wait a bit
> debug: mta: retrying to connect on
> [connector:[]->[relay:mail.tcpudp.org],0x20000] in 2s...
> debug: mta: ... timeout for [relay:mail.tcpudp.org]
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=1, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x20000]
> debug: mta: canceling connector timeout
> debug: mta: cannot use [relay:mail.tcpudp.org] before 1s
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org],0x20000]: must wait a bit
> debug: mta: retrying to connect on
> [connector:[]->[relay:mail.tcpudp.org],0x20000] in 1s...
> debug: mta: draining [relay:mail.tcpudp.org] refcount=2, ntask=1,
> nconnector=1, nconn=0
> debug: mta: scheduling relay [relay:mail.tcpudp.org] in 10s...
> debug: mta: ... timeout for [connector:[]->[relay:mail.tcpudp.org],0x20000]
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta-routing: searching new route for
> [connector:[]->[relay:mail.tcpudp.org],0x0]...
> debug: mta-routing: skipping route [] <-> 77.105.40.98 (ns1.tcpudp.org):
> suspend
> smtp-out: No valid route for [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org],0x8]: errors on connector
> debug: mta: ... timeout for [relay:mail.tcpudp.org]
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=1, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x8]
> debug: mta: connector error
> debug: mta: draining [relay:mail.tcpudp.org] refcount=2, ntask=1,
> nconnector=1, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x8]
> debug: mta: connector error
> debug: mta: draining [relay:mail.tcpudp.org] refcount=3, ntask=1,
> nconnector=1, nconn=0
> debug: mta_flush([relay:mail.tcpudp.org], 56, "Network error on
> destination MXs")
> relay: TempFail for 5eadde3e381a9df0: session=0000000000000000,
> from=<r...@mail.tcpudp.org>, to=<r...@mail.tcpudp.org>, rcpt=<->,
> source=-, relay=mail.tcpudp.org, delay=9h11s, stat=Network error on
> destination MXs
> debug: mta: freeing [relay:mail.tcpudp.org]
> debug: mta: freeing [connector:[]->[relay:mail.tcpudp.org],0x8]
> debug: mta: flush for 5eadde3e381a9df0 (-> r...@mail.tcpudp.org)
> debug: scheduler: evp:ce65dc02812c240d scheduled (mta)
> debug: mta: received evp:ce65dc02812c240d for <r...@mail.tcpudp.org>
> debug: mta: draining [relay:mail.tcpudp.org,mx] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying MX for [relay:mail.tcpudp.org,mx]...
> debug: mta: [relay:mail.tcpudp.org,mx] waiting for MX
> debug: MXs for domain mail.tcpudp.org:
> 77.105.40.98 preference -1
> debug: mta: ... got mx (0x7af6ed50, mail.tcpudp.org,
> [relay:mail.tcpudp.org,mx])
> debug: mta: draining [relay:mail.tcpudp.org,mx] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org,mx]...
> debug: mta: ... got source for [relay:mail.tcpudp.org,mx]: []
> debug: mta: new [connector:[]->[relay:mail.tcpudp.org,mx],0x10000]
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org,mx],0x0]
> debug: mta-routing: searching new route for
> [connector:[]->[relay:mail.tcpudp.org,mx],0x0]...
> debug: mta-routing: skipping route [] <-> 77.105.40.98 (ns1.tcpudp.org):
> suspend
> smtp-out: No valid route for [connector:[]->[relay:mail.tcpudp.org,mx],0x0]
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org,mx],0x8]: errors on connector
> debug: mta: draining [relay:mail.tcpudp.org,mx] refcount=2, ntask=1,
> nconnector=1, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org,mx]...
> debug: mta: ... got source for [relay:mail.tcpudp.org,mx]: []
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org,mx],0x8]
> debug: mta: connector error
> debug: mta: draining [relay:mail.tcpudp.org,mx] refcount=3, ntask=1,
> nconnector=1, nconn=0
> debug: mta_flush([relay:mail.tcpudp.org,mx], 56, "Network error on
> destination MXs")
> relay: TempFail for ce65dc02812c240d: session=0000000000000000, from=<>,
> to=<r...@mail.tcpudp.org>, rcpt=<->, source=-, relay=mail.tcpudp.org,
> delay=11h6m40s, stat=Network error on destination MXs
> debug: mta: freeing [relay:mail.tcpudp.org,mx]
> debug: mta: freeing [connector:[]->[relay:mail.tcpudp.org,mx],0x8]
> debug: mta: flush for ce65dc02812c240d (-> r...@mail.tcpudp.org)
> debug: scheduler: evp:f17c5934f50f90c2 scheduled (mta)
> debug: mta: received evp:f17c5934f50f90c2 for <r...@mail.tcpudp.org>
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying MX for [relay:mail.tcpudp.org]...
> debug: mta: [relay:mail.tcpudp.org] waiting for MX
> debug: MXs for domain mail.tcpudp.org:
> 77.105.40.98 preference 0
> debug: mta: ... got mx (0x7af6e4d0, mail.tcpudp.org,
> [relay:mail.tcpudp.org])
> debug: mta: draining [relay:mail.tcpudp.org] refcount=1, ntask=1,
> nconnector=0, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: new [connector:[]->[relay:mail.tcpudp.org],0x10000]
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta-routing: searching new route for
> [connector:[]->[relay:mail.tcpudp.org],0x0]...
> debug: mta-routing: skipping route [] <-> 77.105.40.98 (ns1.tcpudp.org):
> suspend
> smtp-out: No valid route for [connector:[]->[relay:mail.tcpudp.org],0x0]
> debug: mta-routing: no route available for
> [connector:[]->[relay:mail.tcpudp.org],0x8]: errors on connector
> debug: mta: draining [relay:mail.tcpudp.org] refcount=2, ntask=1,
> nconnector=1, nconn=0
> debug: mta: querying source for [relay:mail.tcpudp.org]...
> debug: mta: ... got source for [relay:mail.tcpudp.org]: []
> debug: mta: connecting with [connector:[]->[relay:mail.tcpudp.org],0x8]
> debug: mta: connector error
> debug: mta: draining [relay:mail.tcpudp.org] refcount=3, ntask=1,
> nconnector=1, nconn=0
> debug: mta_flush([relay:mail.tcpudp.org], 56, "Network error on
> destination MXs")
> relay: TempFail for f17c5934f50f90c2: session=0000000000000000, from=<>,
> to=<r...@mail.tcpudp.org>, rcpt=<->, source=-, relay=mail.tcpudp.org,
> delay=11h6m40s, stat=Network error on destination MXs
> debug: mta: freeing [relay:mail.tcpudp.org]
> debug: mta: freeing [connector:[]->[relay:mail.tcpudp.org],0x8]
> debug: mta: flush for f17c5934f50f90c2 (-> r...@mail.tcpudp.org)
> smtp-out: Enabling route [] <-> 77.105.40.98 (ns1.tcpudp.org)
> debug: mta: mta_route_unref(): keeping route [] <-> 77.105.40.98
> (ns1.tcpudp.org) alive for 200s (penalty 1)
> debug: mta: ma_route_unref(): really discarding route [] <->
> 77.105.40.98 (ns1.tcpudp.org)
>
> thanks in advance
>
> --
> You received this mail because you are subscribed to misc@opensmtpd.org
> To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
>
--
Gilles Chehade
https://www.poolp.org @poolpOrg
--
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org
