mx$ cat /etc/mail/smtpd.conf
pki mx.magcast.app cert "/etc/letsencrypt/live/mx.magcast.app/cert.pem" pki mx.magcast.app key "/etc/letsencrypt/live/mx.magcast.app/privkey.pem" filter check_dyndns phase connect match rdns regex { '.*\.dyn\..*', '.*\.dsl\..*' } \ disconnect "550 no residential connections" filter check_rdns phase connect match !rdns \ disconnect "550 no rDNS is so 80s" filter check_fcrdns phase connect match !fcrdns \ disconnect "550 no FCrDNS is so 80s" filter senderscore \ proc-exec "filter-senderscore -blockBelow 10 -junkBelow 70 -slowFactor 5000" filter rspamd proc-exec "filter-rspamd" table aliases file:/etc/mail/aliases listen on all tls pki mx.magcast.app \ filter { check_dyndns, check_rdns, check_fcrdns, senderscore, rspamd } listen on all port submission tls-require pki mx.magcast.app auth filter rspamd action "local_mail" maildir junk alias <aliases> action "outbound" relay helo mx.magcast.app match from any for domain "magcast.app" action "local_mail" match for local action "local_mail" match from any auth for any action "outbound" match for any action "outbound" ============================================================= Also, for what it's worth: mx$ netstat -an | grep LISTEN tcp 0 0 *.993 *.* LISTEN tcp 0 0 *.143 *.* LISTEN tcp 0 0 *.995 *.* LISTEN tcp 0 0 *.110 *.* LISTEN tcp 0 0 *.2000 *.* LISTEN tcp 0 0 *.4190 *.* LISTEN tcp 0 0 127.0.0.1.11333 *.* LISTEN tcp 0 0 127.0.0.1.11334 *.* LISTEN tcp 0 0 127.0.0.1.11332 *.* LISTEN tcp 0 0 127.0.0.1.6379 *.* LISTEN tcp 0 0 *.22 *.* LISTEN tcp 0 0 108.61.229.79.587 *.* LISTEN tcp 0 0 127.0.0.1.587 *.* LISTEN tcp 0 0 108.61.229.79.25 *.* LISTEN tcp 0 0 127.0.0.1.25 *.* LISTEN tcp6 0 0 *.22 *.* LISTEN tcp6 0 0 ::1.587 *.* LISTEN tcp6 0 0 fe80::1%lo0.587 *.* LISTEN tcp6 0 0 *.2000 *.* LISTEN tcp6 0 0 *.4190 *.* LISTEN tcp6 0 0 ::1.11333 *.* LISTEN tcp6 0 0 ::1.11334 *.* LISTEN tcp6 0 0 ::1.11332 *.* LISTEN tcp6 0 0 ::1.25 *.* LISTEN tcp6 0 0 fe80::1%lo0.25 *.* LISTEN tcp6 0 0 *.993 *.* LISTEN tcp6 0 0 *.143 *.* LISTEN tcp6 0 0 *.995 *.* LISTEN tcp6 0 0 *.110 *.* LISTEN ============================================================ mx$ ps aux | grep smtp root 50201 0.0 0.2 1832 2416 ?? Ip 9:41AM 0:00.01 /usr/sbin/smtpd _smtpq 78536 0.0 0.4 1956 4628 ?? Ip 9:41AM 0:00.03 smtpd: queue (smtpd) _smtpd 46568 0.0 0.4 1548 4400 ?? Ip 9:41AM 0:00.04 smtpd: scheduler (smtpd) _smtpd 95502 0.0 0.4 1556 4344 ?? Ip 9:41AM 0:00.02 smtpd: klondike (smtpd) _smtpd 15341 0.0 0.4 1760 4576 ?? Sp 9:41AM 0:00.02 smtpd: control (smtpd) _smtpd 81286 0.0 0.4 1904 4524 ?? Ip 9:41AM 0:00.02 smtpd: lookup (smtpd) _smtpd 98151 0.0 0.5 1960 4984 ?? Sp 9:41AM 0:00.03 smtpd: pony express (smtpd) _smtpd 22192 0.0 0.1 1772 1072 ?? I 9:41AM 0:00.00 /usr/sbin/smtpd _smtpd 2006 0.0 0.3 106116 3544 ?? I 9:41AM 0:00.01 /usr/local/libexec/smtpd/filter-rspamd _smtpd 98128 0.0 0.1 1772 1072 ?? I 9:41AM 0:00.00 /usr/sbin/smtpd _smtpd 3519 0.0 0.3 104620 3076 ?? I 9:41AM 0:00.01 /usr/local/libexec/smtpd/filter-senderscore -blockBelow 10 -junkBelow 70 -slowFactor 5000 (filter-sendersco) ============================================================ mx$ ps aux | grep dovecot root 21685 0.0 0.2 704 2272 ?? I 11:41PM 0:00.05 /usr/local/sbin/dovecot root 62680 0.0 0.2 724 2476 ?? I 11:41PM 0:00.02 dovecot/log _dovecot 35238 0.0 0.2 616 2344 ?? I 11:41PM 0:00.02 dovecot/anvil root 27271 0.0 0.5 2748 5300 ?? I 11:41PM 0:00.09 dovecot/config _dovecot 24598 0.0 0.2 676 2480 ?? I 11:41PM 0:00.02 dovecot/stats ============================================================ mx$ ps aux | grep spam root 35077 0.0 0.4 41748 3756 ?? I 11:41PM 0:00.09 rspamd: main process (rspamd) _rspamd 17847 0.0 0.7 41908 7380 ?? S 11:41PM 0:01.48 rspamd: rspamd_proxy process (localhost:11332) (rspamd) _rspamd 35396 0.0 1.3 42840 13092 ?? S 11:41PM 0:08.62 rspamd: controller process (localhost:11334) (rspamd) _rspamd 9697 0.0 1.0 42676 9896 ?? S 11:41PM 0:01.55 rspamd: normal process (localhost:11333) (rspamd) _smtpd 2006 0.0 0.3 106116 3544 ?? I 9:41AM 0:00.01 /usr/local/libexec/smtpd/filter-rspamd ============================================================ mx$ ps aux | grep redis _redis 86838 0.0 0.3 14468 2860 ?? S 11:41PM 0:19.81 redis-server: /usr/local/sbin/redis-server 127.0.0.1:6379 (redis-server) On Thu, Oct 3, 2019 at 9:11 AM Edgar Pettijohn <ed...@pettijohn-web.com> wrote: > Could you post your config. > > Thanks > On Oct 3, 2019 10:34 AM, Kevin <spy...@gmail.com> wrote: > > > > On Thu, Oct 3, 2019 at 12:36 AM Peter N. M. Hansteen <pe...@bsdly.net> > wrote: > > On Wed, Oct 02, 2019 at 11:33:58PM -0700, Kevin wrote: > > Hi all, > > > > Having just followed the setup instructions on Gilles HOWTO page here: > > > > > > > https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd/ > > > > > > ...I'm unable to send mail from my new OpenSMTPD server on OpenBSD > 6.6-beta > > (OpenBSD 6.6-beta (GENERIC) #320: Mon Sep 30 21:24:24 MDT 2019); however, > > other deliveries (and mail retrieval) work. > > > > The pertinent log message looks like this: > > > > Oct 2 23:21:33 mx smtpd[25067]: bf1c57bab7fcd344 smtp envelope > > evpid=2c41c5fc4a7e6c06 from=<ksm...@mx.example.app> to=<spy...@gmail.com > > > > Oct 2 23:21:33 mx smtpd[25067]: bf1c57bab7fcd344 smtp disconnected > > reason=quit > > Oct 2 23:21:38 mx smtpd[25067]: bf1c57b6b057c6ef mta error > > reason=Connection timeout > > Connection timeout sounds very much like your machine is not allowed to > send > outgoing mail via SMTP. Check for firewalls and the like. > > Also, > > [Thu Oct 03 09:24:37] peter@skapet:~$ host example.app > Host example.app not found: 3(NXDOMAIN) > [Thu Oct 03 09:24:43] peter@skapet:~$ host mx.example.app > Host mx.example.app not found: 3(NXDOMAIN) > > Among the things you need in order to deliver mail, a valid domain is in > the top few. I think the basic requirements are indeed listed in the > article > (under "Requirements"), please go back and re-read, check that you have > all of those set up properly. > > > I can see why you might think that given that I altered the real domain > name to example.app. (I know it's frowned upon; I only did it because this > is a new machine with a setup hobbling along. Bad Kevin... bad...) > > In any event, I'm *sure* the domain DNS part is right as I can _receive_ > email just fine, including from the same @gmail address I'm writing this > from, ergo, DNS resolution of the real domain (and its MX record) are fine. > > As for pf being the issue; it's disabled. > > # pfctl -s info > Status: Disabled for 0 days 08:23:56 Debug: err > > Latest, greatest kernel running: > > $ dmesg | grep Open | tail -1 > OpenBSD 6.6 (GENERIC) #326: Wed Oct 2 22:34:33 MDT 2019 > > One of the things that's puzzling is this part of the log: > > <snip> > smtp disconnected reason=quit. > </snip> > > If I can send the domain email, if I can retrieve email via Dovecot, if I > can send mail to myself from the server's CLI (and even retrieve it > remotely via my mail client), it seems like there's some knob missing that > says, "All auth'd users to relay," yet, I've copied-and-pasted Gilles' > rules (and edited them for my own domain) , and it am no workie. > > Is there perhaps something else akin to the forwarding knob that lets PF > forward packets between interfaces that either I've forgotten or was > skipped in the HOWTO? > > Thanks, > Kevin > >