[pfx] Re: Postfix + rspamd -> server respond: try again later
On Tue, 10 Sep 2024 12:17:11 -0400 Bill Cole via Postfix-users wrote: > On 2024-09-10 at 04:51:13 UTC-0400 (Tue, 10 Sep 2024 10:51:13 +0200) > Enrico Morelli via Postfix-users > is rumored to have said: > > > On Tue, 10 Sep 2024 10:43:25 +0200 > > Enrico Morelli via Postfix-users wrote: > > > >> Dear all, > >> > >> I'd installed rspamd as antispam in my postfix mail server. > >> Everything seems to work fine except for some users who report a > >> problem when trying to send e-mails from an external network. The > >> error is: An error occurred while sending mail. The mail server > >> responded: Try again later. Please check the message and try again. > >> > >> I configured rspamd to disable greylist for email address coming > >> from our domain. > >> > >> Where can I investigate to solve the problem? > >> > > > > I tried from my phone using 4G network and I see that in postfix > > log file: > > > > > > Sep 10 10:45:21 genio postfix/smtpd[2066845]: 7C1CB83872A: > > client=mobiledyn-62-240-135-13.mrsn.it[62.240.135.13], > > sasl_method=PLAIN, sasl_username=more...@cerm.unifi.it > > Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: > > message-id=<191db1bb1d8.282c.a953f059503a376e0563cf9126e3a...@cerm.unifi.it> > > Sep 10 10:45:22 genio postfix/postscreen[625953]: CONNECT from > > [178.77.121.166]:38082 to [150.217.146.39]:25 > > Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: > > milter-reject: END-OF-MESSAGE from > > mobiledyn-62-240-135-13.mrsn.it[62.240.135.13]: 4.7.1 Try again > > later; from= to= proto=ESMTP > > helo=<[100.75.128.253]> > > Sep 10 10:45:22 genio postfix/smtpd[2066845]: disconnect from > > mobiledyn-62-240-135-13.mrsn.it[62.240.135.13] ehlo=2 starttls=1 > > auth=1 > > mail=1 rcpt=1 data=0/1 quit=1 commands=7/8 > > > > Without your actual configuration ("postconf -nf" output ) it is only > possible to *guess* at the source of the problem. > > The above log lines seem to show a connection on the main (port 25) > SMTP daemon, based on the fact that it goes through postscreen. It > is the modern best practice to NOT use port 25 for anything but > incoming Internet mail and NOT enable authentication there. Instead, > you should run submission daemons on ports 587 (with STARTTLS > enabled) and 465 (in TLS wrapper mode.) How this is done is all > described in the documentation. > > This is my postconf. Usually I set clients to use 587 port with STARTTLS. I'll check the documentation for your suggestion. alias_maps = hash:/etc/aliases allow_mail_to_commands = alias,forward allow_mail_to_files = alias,forward append_dot_mydomain = yes biff = no canonical_maps = hash:/etc/postfix/canonical compatibility_level = 2 content_filter = smtp-amavis:[127.0.0.1]:10024 home_mailbox = Maildir/ inet_interfaces = all inet_protocols = ipv4 mailbox_command = mailbox_size_limit = 0 message_size_limit = 3272 milter_default_action = accept milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen} milter_protocol = 6 mydestination = $myhostname $myhostname localhost.$mydomain localhost mydomain = cerm.unifi.it myhostname = genio.cerm.unifi.it mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 150.217.145.0/24 150.217.146.0/24 150.217.163.128/26 myorigin = $mydomain parent_domain_matches_subdomains = postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr postscreen_dnsbl_action = enforce postscreen_dnsbl_sites = zen.spamhaus.org*2 sbl.spamhaus.org*2 bl.spamcop.net*1 sbl.spamcop.net*1 cbl.spamcop.net*1 cbl.abuseat.org*1 b.barracudacentral.org*1 postscreen_dnsbl_threshold = 2 postscreen_greet_action = enforce readme_directory = no receive_override_options = no_address_mappings recipient_bcc_maps = hash:/etc/postfix/recipient_bcc recipient_canonical_classes = envelope_recipient,header_recipient recipient_canonical_maps = tcp:localhost:10002 recipient_delimiter = + relayhost = sender_canonical_classes = envelope_sender sender_canonical_maps = tcp:localhost:10001 smtp_tls_security_level = may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_command_filter = pcre:/etc/postfix/command_filter smtpd_data_restrictions = reject_unauth_pipelining smtpd_error_sleep_time = 1s smtpd_hard_error_limit = 20 smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access pcre:/etc/postfix/helo_checks.pcre check_client_access hash:/etc/postfix/client_access, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, permit smtpd_milte
[pfx] Re: Postfix + rspamd -> server respond: try again later
On Tue, 10 Sep 2024 10:51:13 +0200 Enrico Morelli via Postfix-users wrote: > On Tue, 10 Sep 2024 10:43:25 +0200 > Enrico Morelli via Postfix-users wrote: > > > Dear all, > > > > I'd installed rspamd as antispam in my postfix mail server. > > Everything seems to work fine except for some users who report a > > problem when trying to send e-mails from an external network. The > > error is: An error occurred while sending mail. The mail server > > responded: Try again later. Please check the message and try again. > > > > I configured rspamd to disable greylist for email address coming > > from our domain. > > > > Where can I investigate to solve the problem? > > > > I tried from my phone using 4G network and I see that in postfix log > file: > > > Sep 10 10:45:21 genio postfix/smtpd[2066845]: 7C1CB83872A: > client=mobiledyn-62-240-135-13.mrsn.it[62.240.135.13], > sasl_method=PLAIN, sasl_username=more...@cerm.unifi.it Sep 10 > 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: > message-id=<191db1bb1d8.282c.a953f059503a376e0563cf9126e3a...@cerm.unifi.it> > Sep 10 10:45:22 genio postfix/postscreen[625953]: CONNECT from > [178.77.121.166]:38082 to [150.217.146.39]:25 Sep 10 10:45:22 genio > postfix/cleanup[2066259]: 7C1CB83872A: milter-reject: END-OF-MESSAGE > from mobiledyn-62-240-135-13.mrsn.it[62.240.135.13]: 4.7.1 Try again > later; from= to= proto=ESMTP > helo=<[100.75.128.253]> Sep 10 10:45:22 genio postfix/smtpd[2066845]: > disconnect from mobiledyn-62-240-135-13.mrsn.it[62.240.135.13] ehlo=2 > starttls=1 auth=1 mail=1 rcpt=1 data=0/1 quit=1 commands=7/8 > I should have solved adding another greylist configuration to rspamd. -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Re: Postfix + rspamd -> server respond: try again later
On Tue, 10 Sep 2024 10:43:25 +0200 Enrico Morelli via Postfix-users wrote: > Dear all, > > I'd installed rspamd as antispam in my postfix mail server. > Everything seems to work fine except for some users who report a > problem when trying to send e-mails from an external network. The > error is: An error occurred while sending mail. The mail server > responded: Try again later. Please check the message and try again. > > I configured rspamd to disable greylist for email address coming from > our domain. > > Where can I investigate to solve the problem? > I tried from my phone using 4G network and I see that in postfix log file: Sep 10 10:45:21 genio postfix/smtpd[2066845]: 7C1CB83872A: client=mobiledyn-62-240-135-13.mrsn.it[62.240.135.13], sasl_method=PLAIN, sasl_username=more...@cerm.unifi.it Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: message-id=<191db1bb1d8.282c.a953f059503a376e0563cf9126e3a...@cerm.unifi.it> Sep 10 10:45:22 genio postfix/postscreen[625953]: CONNECT from [178.77.121.166]:38082 to [150.217.146.39]:25 Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: milter-reject: END-OF-MESSAGE from mobiledyn-62-240-135-13.mrsn.it[62.240.135.13]: 4.7.1 Try again later; from= to= proto=ESMTP helo=<[100.75.128.253]> Sep 10 10:45:22 genio postfix/smtpd[2066845]: disconnect from mobiledyn-62-240-135-13.mrsn.it[62.240.135.13] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=0/1 quit=1 commands=7/8 -- ----------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
[pfx] Postfix + rspamd -> server respond: try again later
Dear all, I'd installed rspamd as antispam in my postfix mail server. Everything seems to work fine except for some users who report a problem when trying to send e-mails from an external network. The error is: An error occurred while sending mail. The mail server responded: Try again later. Please check the message and try again. I configured rspamd to disable greylist for email address coming from our domain. Where can I investigate to solve the problem? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ___ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
Re: domain owner discourages use of this host
On Tue, 11 Jan 2022 10:48:53 +0100 Charlotte 🦝 Delenk wrote: > Hi, > On 11.01.22 10:40, Enrico Morelli wrote: > > Dear all, > > > > sending mail to some external users I receive this error: > > > > Recipient address rejected: Message rejected due to: domain owner > > discourages use of this host. (in reply to RCPT TO command)) > > > > What means? Is the problem related to my postfix mail server? > > > > > > Sounds like an SPF problem. > > You may want to add an “mx” to your spf record, since > “genio.cerm.unifi.it” and its IP Address 150.217.146.39 does not > appear to be in your nested SPF record > Thanks, is that something the DNS manager has to do or me on postfix? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: domain owner discourages use of this host
On Tue, 11 Jan 2022 10:43:14 +0100 Matus UHLAR - fantomas wrote: > On 11.01.22 10:40, Enrico Morelli wrote: > >Dear all, > > > >sending mail to some external users I receive this error: > > > >Recipient address rejected: Message rejected due to: domain owner > >discourages use of this host. (in reply to RCPT TO command)) > > > >What means? Is the problem related to my postfix mail server? > > looks liks SPF error. > hard to tell more without logs. > The only message in mail.log are the following: Jan 11 09:34:13 genio postfix/smtp[28088]: 6090C80922E: to=, relay=mail.remote.server[x.xxx.xx.xx]:25, delay=8.6, delays=0/0.01/7.5/1, dsn=5.7.23, status=bounced (host mail.remote.server[x.xxx.xx.xx] said: 550 5.7.23 : Recipient address rejected: Message rejected due to: domain owner discourages use of this host. (in reply to RCPT TO command)) Jan 11 09:34:13 genio postfix/smtp[28088]: 6090C80922E: to=, relay=mail.remote.server[x.xxx.xx.xx]:25, delay=8.6, delays=0/0.01/7.5/1, dsn=5.7.23, status=bounced (host mail.remote.server[x.xxx.xx.xx] said: 550 5.7.23 :Recipient address rejected: Message rejected due to: domain owner discourages use of this host. (in reply to RCPT TO command)) -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
domain owner discourages use of this host
Dear all, sending mail to some external users I receive this error: Recipient address rejected: Message rejected due to: domain owner discourages use of this host. (in reply to RCPT TO command)) What means? Is the problem related to my postfix mail server? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Send advice when user receive email
Dear, I have a postfix server with virtual_transport = lmtp:unix:private/dovecot-lmtp Is there a way to send and advise to another email address each time I receive an email? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Unable to send email
On Mon, 16 Nov 2020 10:45:23 +0100 Bastian Blank wrote: > On Mon, Nov 16, 2020 at 10:34:08AM +0100, Enrico Morelli wrote: > > 5F2E68092A2 335691 Mon Nov 16 10:00:40 i...@mydomain.it > > (Host or domain name not found. Name service error for > > name=recipient-it.mail.protection.outlook.com type=A: Host not > > found, try again) recipi...@recipient.it > > | % drill recipient.it mx > | ;; ->>HEADER<<- opcode: QUERY, rcode: NXDOMAIN, id: 39998 > > Sorry, but recipient.it is not an existing domain. Use > example.{com,net,org}! > > > The domain mail.protection.outlook.com is added to each address. > > I haven't made any changes to the postfix configuration. > > Your recipient is hosted on Microsoft 365 and missconfigured. > > > Where is the problem? How can I solve it? > > There is no problem, just wrong configuration at your recipient. > > Bastian > Thanks, after some investigation it seems to be a dns problem. -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Unable to send email
Dear all, today I've a lot of email in postfix queue for the following reason: 5F2E68092A2 335691 Mon Nov 16 10:00:40 i...@mydomain.it (Host or domain name not found. Name service error for name=recipient-it.mail.protection.outlook.com type=A: Host not found, try again) recipi...@recipient.it The domain mail.protection.outlook.com is added to each address. I haven't made any changes to the postfix configuration. Where is the problem? How can I solve it? Thanks -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: TLS verification problem - ca untrusted, but it shouldn't be
On Wed, 8 Jul 2020 09:03:52 +0200 Rainer Ruprechtsberger wrote: > Hello, > > this is not my only problem with TLS verification - and I'm struggling > to debug this: > > *mail.mail.protection.outlook.com cannot be verified by postfix: > posttls-finger: certificate verification failed for > blahblahommited.mail.protection.outlook.com[104.47.14.36]:25: > untrusted issuer /C=BE/O=GlobalSign nv-sa/OU=Root CA/CN=GlobalSign > Root CA > > But I do trust this CA: > smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt > > Which I did verify by: > openssl s_client -CAfile > /var/spool/postfix/etc/ssl/certs/ca-certificates.crt -connect > blahblahommited.mail.protection.outlook.com:25 --starttls smtp > > That gave: > ... > SSL handshake has read 3975 bytes and written 543 bytes > Verification: OK > ... > SSL-Session: > ... > Verify return code: 0 (ok) > > There is an intermediate CA involved: > issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign Organization > Validation CA > - SHA256 - G3 > > But this Certificate is signed by above mentioned CA (which > posttls-finger says it doesn't trust). > > My system is a Debian Buster, postfix version 3.4.10-0+deb10u1. > > Any pointers to resolve this would be appreciated. > > lg, > I'd the same problem, I solved creating a certificate chain with the server certificate and the CA intermediate certificate with: cat server.cer intermediate.cer > server_chain.cer After that in the main.cf you use the server_chain.cer as smtpd_tls_cert_file. -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: lost connection after HELO
On Thu, 28 May 2020 09:59:56 +0200 Matus UHLAR - fantomas wrote: > On 28.05.20 09:36, Enrico Morelli wrote: > >I've an UPS that should send me email in case of problems. The email > >do not arrive because in the log I see "lost connection after HELO". > > > >I added debug_peer_list to my main.cf to debug the ups connection. Is > >there a way to solve the problem? > > >May 28 09:13:15 genio postfix/smtpd[31295]: < > >ups-ced.domain.net[192.168.145.19]: EHLO > >May 28 09:13:15 genio postfix/smtpd[31295]: > > >ups-ced.domain.net[192.168.145.19]: 501 Syntax: EHLO hostname > >May 28 09:13:15 genio postfix/smtpd[31295]: watchdog_pat: > >0x558d6b58d9f0 > >May 28 09:13:15 genio postfix/smtpd[31295]: < > >ups-ced.domain.net[192.168.145.19]: HELO > >May 28 09:13:15 genio postfix/smtpd[31295]: > > >ups-ced.domain.net[192.168.145.19]: 501 Syntax: HELO hostname > >May 28 09:13:15 genio postfix/smtpd[31295]: watchdog_pat: > >0x558d6b58d9f0 > >May 28 09:13:15 genio postfix/smtpd[31295]: smtp_get: EOF > > looks like yout UPS does not provide hostname in EHLO/HELO message, > which postfix doesn't accept. > If you can't set up a hostname on your UPS, you'll have to accept such > invalid helo, perhaps as described on: > https://www.claudiokuenzler.com/blog/664/force-postfix-allow-empty-null-helo-ehlo-smtp-commands > > it would be better only to accept such helo from IP of the UPS, if > possible > > > Thank you, the filter works. Now the mail goes is blocked by amavis, but this is another problem. My UPS is very strange :-)) -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
lost connection after HELO
client_event_limit_exceptions: 150.217.145.19 ~? [:::127.0.0.0]/104 May 28 09:13:15 genio postfix/smtpd[31295]: match_hostname: smtpd_client_event_limit_exceptions: ups-ced.cerm.unifi.it ~? [::1]/128 May 28 09:13:15 genio postfix/smtpd[31295]: match_hostaddr: smtpd_client_event_limit_exceptions: 150.217.145.19 ~? [::1]/128 May 28 09:13:15 genio postfix/smtpd[31295]: match_hostname: smtpd_client_event_limit_exceptions: ups-ced.cerm.unifi.it ~? 150.217.145.0/24 May 28 09:13:15 genio postfix/smtpd[31295]: match_hostaddr: smtpd_client_event_limit_exceptions: 150.217.145.19 ~? 150.217.145.0/24 May 28 09:13:15 genio postfix/smtpd[31295]: lost connection after HELO from ups-ced.cerm.unifi.it[150.217.145.19] May 28 09:13:15 genio postfix/smtpd[31295]: disconnect from ups-ced.cerm.unifi.it[150.217.145.19] helo=0/1 ehlo=0/1 commands=0/2 May 28 09:13:15 genio postfix/smtpd[31295]: name_mask: no_address_mappings -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix web interface for log analysis
On Thu, 14 Nov 2019 09:46:52 -0300 Emanuel wrote: > Hi all, > > Is there any web interface exists for postfix email log analysis? > What I need is to see all the logs through web interface, see the > reports of rejection, deferred, bounces, success etc. w.r.t. datetime > and/or domain filter etc. > > Thanks in advance for your guidance. I don't know if this is what you want, I use sendmail analyzer (http://sareport.darold.net/index.html) that create web pages with graphics of all traffic in and out, spam, viruses and other useful information. -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: How to block mail coming from a domain
On Thu, 26 Sep 2019 11:29:38 +0100 Dominic Raferd wrote: > On Thu, 26 Sep 2019 at 11:24, Enrico Morelli > wrote: > > I've search in my Debian 10 packages but there isn't postscreen. > > Is it in bundle with new postfix version? In Debian 10 I've postfix > > 3.4.5 > > Yes it is a standard part of postfix - try 'man postscreen' Good. In the master.cf I've smtp inet n - y - - smtpd #smtp inet n - y - 1 postscreen to enable postscreen have I to uncomment the second line and comment the first one? -- ----------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: How to block mail coming from a domain
On Thu, 26 Sep 2019 10:42:46 +0200 Enrico Morelli wrote: > On Thu, 26 Sep 2019 16:37:14 +0800 > Wesley Peng wrote: > > > on 2019/9/26 16:34, Enrico Morelli wrote: > > > I tried to put .monster or *.monster in sender_access but doesn't > > > work. Is there a way to block *.monster mails? > > > > Can you setup spamassassin for domain blacklist? > > > > regards. > > How can do that? > In /etc/spamassassin/local.cf I putted: blacklist_from *.monster Is it correct? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: How to block mail coming from a domain
On Thu, 26 Sep 2019 16:37:14 +0800 Wesley Peng wrote: > on 2019/9/26 16:34, Enrico Morelli wrote: > > I tried to put .monster or *.monster in sender_access but doesn't > > work. Is there a way to block *.monster mails? > > Can you setup spamassassin for domain blacklist? > > regards. How can do that? -- ----------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix: Variable meanings table
On Fri, 9 Aug 2019 03:32:20 -0700 (MST) manu19 wrote: > Can someone tell me how I can get the meaning of these variables > (ehlo..commands) in the postfix log? > i.e: > 1) disconnect from ..xx [99.99.999.99] ehlo= 2 starttls= 1 > mail=1 rcpt=1 data=1 quit=1 commands=7 > 2) disconnect from ..xx [99.99.999.99] ehlo=2 starttls=1 > mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8 > > Thank you very much!! > > > > -- > Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html https://www.samlogic.net/articles/smtp-commands-reference.htm -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix log
On Fri, 9 Aug 2019 12:11:35 +0200 Matus UHLAR - fantomas wrote: > On 09.08.19 11:56, Enrico Morelli wrote: > >I'll try to put > > > > postrotate > > /usr/lib/rsyslog/rsyslog-rotate > > endscript > > > >in my postfix logrotate script to see if it works. > > don't. Simply look what's in /etc/logrotate.d/*syslog* > it should contain /var/log/mail. files > Yes, I know. But I've to maintain the log for a long time, so I created a logrotate script that worked with the previous version of Debian/Postfix. Now I encounter the problem described in this post. -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix log
On Fri, 9 Aug 2019 11:17:26 +0200 Alexander Wirt wrote: > On Fri, 09 Aug 2019, Benny Pedersen wrote: > > Hi, > > > > Thanks, postscript is not part of the Debian package. I'll try to > > > put: service postfix restart > > > > this is not working, postfix send logs to syslogd, so restarting > > postfix is not what to do, restart the syslogd will work > > > > please create a bug on debian so it can be resolved, its default > > logrotate problem that does not restart syslogd > The default syslogd (rsyslogd) in debian does that: > > /var/log/mail.info > /var/log/mail.warn > /var/log/mail.err > /var/log/mail.log > /var/log/daemon.log > /var/log/kern.log > /var/log/auth.log > /var/log/user.log > /var/log/lpr.log > /var/log/cron.log > /var/log/debug > /var/log/messages > { > rotate 4 > weekly > missingok > notifempty > compress > delaycompress > sharedscripts > postrotate > /usr/lib/rsyslog/rsyslog-rotate > endscript > } > > cat /usr/lib/rsyslog/rsyslog-rotate > #!/bin/sh > > if [ -d /run/systemd/system ]; then > systemctl kill -s HUP rsyslog.service > else > invoke-rc.d rsyslog rotate > /dev/null > fi > > I'll try to put postrotate /usr/lib/rsyslog/rsyslog-rotate endscript in my postfix logrotate script to see if it works. -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix log
On Fri, 9 Aug 2019 08:18:21 + Matthew Lowy wrote: > Hi Enrico, > > I can't speak for why postscript behaviour has changed, but this is a > known issue for other applications that hold a file open across time > instead of opening it to write / closing it after write. Logrotate > allows you to put in a postrotate / endscript sequence that can be > used to make the application do whatever is necessary to make it > re-open it's log file (or anything else...) Any lines between the > line containing 'postrotate' and the line containing 'endscript' will > be run after the rotate job has rotated the files. So in between you > can stop / start postfix or restart postfix or any other action that > can cause it to re-process it's log file. > > For example... > postrotate > service postscript restart > endscript > > someone else might know if postscript will handle kill -HUP (kill -1) > correctly (I'm running an older version of postscript that doesn't > exhibit this behaviour, it handles the log being switched under it > just fine) or you could try it out. > Thanks, postscript is not part of the Debian package. I'll try to put: service postfix restart > ML > > -Original Message- > From: owner-postfix-us...@postfix.org > On Behalf Of Enrico Morelli Sent: > 09 August 2019 08:33 To: postfix-users@postfix.org > Subject: Postfix log > > Dear, > > I upgraded Debian from version 9 to 10 and consequently postfix > 3.1.12 to 3.4.5. I'm checking log with multitail in real time and > with the new postfix version, I've a strange behavior. When the logs > rotate, postfix continues to write in the old file renamed mail.log.1 > instead of the new mail.log. I've to restart postfix to solve the > problem. > > I created a postfix file in logrotate.d, as the following, that > worked before the update: > > /var/log/mail.info > /var/log/mail.warn > /var/log/mail.err > /var/log/mail.log { > weekly > missingok > notifempty > delaycompress > compress > create 640 root adm > rotate 3650 > size 10M > } > > Any suggestion? > > -- > --- > Enrico Morelli > System Administrator | Programmer | Web Developer > > CERM - Polo Scientifico > via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Postfix log
Dear, I upgraded Debian from version 9 to 10 and consequently postfix 3.1.12 to 3.4.5. I'm checking log with multitail in real time and with the new postfix version, I've a strange behavior. When the logs rotate, postfix continues to write in the old file renamed mail.log.1 instead of the new mail.log. I've to restart postfix to solve the problem. I created a postfix file in logrotate.d, as the following, that worked before the update: /var/log/mail.info /var/log/mail.warn /var/log/mail.err /var/log/mail.log { weekly missingok notifempty delaycompress compress create 640 root adm rotate 3650 size 10M } Any suggestion? -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Postfix upgrade, possible issue
Dear, I would to upgrade our mail server from Debian 9 to 10. The postfix version on Debian 9 is 3.1.12 while on Debian 10 will be 3.4.5. Can I encounter issue during the upgrade? Are there incompatible configuration options between the two versions? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Forwarded mail problem
On Fri, 1 Feb 2019 15:50:36 +0100 Francesc Peñalvez wrote: > you can use this Google APP > https://postmaster.google.com/managedomains also you can use DKIM and > or SPF verification > Thanks, I'll ask to our network provider to set SPF record in our DNS servers. > *** > > El 01/02/2019 a las 15:41, Enrico Morelli escribió: > > Dear all, > > > > I having some problem forwarding some emails to Gmail addresses. > > Sometime the emails are bounced cause: > > > > This message does not have authentication information or fails to > > pass 550-5.7.1 authentication checks. To best protect our users > > from spam, the 550-5.7.1 message has been blocked. Please visit > > 550-5.7.1 > > https://support.google.com/mail/answer/81126#authentication for > > more 550 5.7.1 information. k11si3359248wrp.39 - gsmtp (in reply to > > end of DATA command)) > > > > I'm sure that these emails aren't spam. > > > > Someone can explain me why? Is there some misconfiguration in my > > mail server? > > > > Thanks > > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Forwarded mail problem
On Fri, 1 Feb 2019 15:50:14 +0100 Paolo Barbato wrote: > Dear Enrico, > > it seems that your domain hasn't any SPF entry in DNS. > > dig txt cerm.unifi.it > > Fighting spammers is hard, so at least SPF have to be used to > legitimate your IPs. > > DKIM and DMARC are other ways...somewhat more complex to implement. > > Regards, > Paolo. > Thanks Paolo, I'm not the domain administrator, so I'll ask to our network provider to put SPF record in our DNS servers. > > > On 1 Feb 2019, at 15:41, Enrico Morelli > > wrote: > > > > Dear all, > > > > I having some problem forwarding some emails to Gmail addresses. > > Sometime the emails are bounced cause: > > > > This message does not have authentication information or fails to > > pass 550-5.7.1 authentication checks. To best protect our users > > from spam, the 550-5.7.1 message has been blocked. Please visit > > 550-5.7.1 > > https://support.google.com/mail/answer/81126#authentication for > > more 550 5.7.1 information. k11si3359248wrp.39 - gsmtp (in reply to > > end of DATA command)) > > > > I'm sure that these emails aren't spam. > > > > Someone can explain me why? Is there some misconfiguration in my > > mail server? > > > > Thanks > > > > -- > > --- > > Enrico Morelli > > System Administrator | Programmer | Web Developer > > > > CERM - Polo Scientifico > > via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY > > > > > Paolo Barbato > > Consorzio RFX > <https://www.igi.cnr.it/>corso Stati > Uniti,4 35127 Padova - Italy > Network Administrator > phone: +39 049 8295097 fax: +39 049 8700718 > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Forwarded mail problem
Dear all, I having some problem forwarding some emails to Gmail addresses. Sometime the emails are bounced cause: This message does not have authentication information or fails to pass 550-5.7.1 authentication checks. To best protect our users from spam, the 550-5.7.1 message has been blocked. Please visit 550-5.7.1 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.1 information. k11si3359248wrp.39 - gsmtp (in reply to end of DATA command)) I'm sure that these emails aren't spam. Someone can explain me why? Is there some misconfiguration in my mail server? Thanks -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix & logrotate
On Wed, 28 Mar 2018 11:13:04 +0200 L.P.H. van Belle wrote: > You did not get the hint.. The "wrong" thing here is mail.* > Because your rotating now everything behind the mail.* > so also .1 .1.1 .1.1.1 etc etc, until you server explodes ;-) > > You should have this in you postfix logrotate.. > Try this. > > /var/log/mail.info /var/log/mail.warn /var/log/mail.err /var/log/mail.log > { monthly > missingok > notifempty > delaycompress > compress > create 640 root adm > rotate 3650 > size 10M > } > > Greetz, Great!! You are ready, Thanks you. > > Louis > > > -Oorspronkelijk bericht- > > Van: more...@cerm.unifi.it > > [mailto:owner-postfix-us...@postfix.org] Namens Enrico Morelli > > Verzonden: woensdag 28 maart 2018 10:54 > > Aan: postfix-users@postfix.org > > Onderwerp: Re: Postfix & logrotate > > > > On Wed, 28 Mar 2018 10:24:49 +0200 > > L.P.H. van Belle wrote: > > > > > Hai, > > > > > > Did you remove the mail rotate also from > > /etc/logrotate.d/rsyslog ? > > > > > > You have these lines in the rsyslog file also. > > > /var/log/mail.info > > > /var/log/mail.warn > > > /var/log/mail.err > > > /var/log/mail.log > > > > > > Your now "double" rotateing your logs. ;-) > > > > > > > > > Greetz, > > > > > > > I removed the mail.* from rsyslog before creating the postfix file. > > > > > > > louis > > > > > > > > > > > > > -Oorspronkelijk bericht- > > > > Van: more...@cerm.unifi.it > > > > [mailto:owner-postfix-us...@postfix.org] Namens Enrico Morelli > > > > Verzonden: woensdag 28 maart 2018 10:19 > > > > Aan: postfix-us...@cloud9.net > > > > Onderwerp: Postfix & logrotate > > > > > > > > This problem is not strictly related to Postfix, but I'm > > going crazy > > > > trying to solve it. I've a postfix mail server on Debian 9. I > > > > want maintain the mail log, so I create a posfix file in > > /etc/logrotate.d > > > > with the following content (this is the latest attempt to find a > > > > solution): > > > > > > > > /var/log/mail.* { > > > > monthly > > > > missingok > > > > notifempty > > > > delaycompress > > > > compress > > > > rotate 3650 > > > > size 10M > > > > } > > > > > > > > Every day I find a lot of empty mail log like the following: > > > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1 > > > > -rw-r--r-- 1 root adm11150441 Mar 28 06:25 mail.log.1.1 > > > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1.1.1 > > > > -rw-r--r-- 1 root adm13200643 Mar 25 06:25 > > > > mail.log.1.1.1.1 -rw-r--r-- 1 root adm 0 Mar 28 > > > > 06:25 mail.log.1.1.1.1.1.1 -rw-r--r-- 1 root adm14921041 > > > > Mar 23 06:25 mail.log.1.1.1.1.1.1.1 > > > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 > > > > mail.log.1.1.1.1.1.1.1.1 > > > > > > > > After the weekend the logs seems a tree. Someone can help me to > > > > solve the problem? > > > > > > > > Thanks > > > > > > > > > > > > -- > > > > --- > > > > Enrico Morelli > > > > System Administrator | Programmer | Web Developer > > > > > > > > CERM - Polo Scientifico > > > > via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY > > > > > > > > > > > > > > > > > > > > > > > -- > > --- > > Enrico Morelli > > System Administrator | Programmer | Web Developer > > > > CERM - Polo Scientifico > > via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY > > > > > > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix & logrotate
On Wed, 28 Mar 2018 10:24:49 +0200 L.P.H. van Belle wrote: > Hai, > > Did you remove the mail rotate also from /etc/logrotate.d/rsyslog ? > > You have these lines in the rsyslog file also. > /var/log/mail.info > /var/log/mail.warn > /var/log/mail.err > /var/log/mail.log > > Your now "double" rotateing your logs. ;-) > > > Greetz, > I removed the mail.* from rsyslog before creating the postfix file. > louis > > > > > -Oorspronkelijk bericht- > > Van: more...@cerm.unifi.it > > [mailto:owner-postfix-us...@postfix.org] Namens Enrico Morelli > > Verzonden: woensdag 28 maart 2018 10:19 > > Aan: postfix-us...@cloud9.net > > Onderwerp: Postfix & logrotate > > > > This problem is not strictly related to Postfix, but I'm going crazy > > trying to solve it. I've a postfix mail server on Debian 9. I want > > maintain the mail log, so I create a posfix file in /etc/logrotate.d > > with the following content (this is the latest attempt to find a > > solution): > > > > /var/log/mail.* { > > monthly > > missingok > > notifempty > > delaycompress > > compress > > rotate 3650 > > size 10M > > } > > > > Every day I find a lot of empty mail log like the following: > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1 > > -rw-r--r-- 1 root adm11150441 Mar 28 06:25 mail.log.1.1 > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1.1.1 > > -rw-r--r-- 1 root adm13200643 Mar 25 06:25 mail.log.1.1.1.1 > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 > > mail.log.1.1.1.1.1.1 -rw-r--r-- 1 root adm14921041 Mar 23 > > 06:25 mail.log.1.1.1.1.1.1.1 > > -rw-r--r-- 1 root adm 0 Mar 28 06:25 > > mail.log.1.1.1.1.1.1.1.1 > > > > After the weekend the logs seems a tree. Someone can help me to > > solve the problem? > > > > Thanks > > > > > > -- > > ------- > > Enrico Morelli > > System Administrator | Programmer | Web Developer > > > > CERM - Polo Scientifico > > via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY > > > > > > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Postfix & logrotate
This problem is not strictly related to Postfix, but I'm going crazy trying to solve it. I've a postfix mail server on Debian 9. I want maintain the mail log, so I create a posfix file in /etc/logrotate.d with the following content (this is the latest attempt to find a solution): /var/log/mail.* { monthly missingok notifempty delaycompress compress rotate 3650 size 10M } Every day I find a lot of empty mail log like the following: -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1 -rw-r--r-- 1 root adm11150441 Mar 28 06:25 mail.log.1.1 -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1.1.1 -rw-r--r-- 1 root adm13200643 Mar 25 06:25 mail.log.1.1.1.1 -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1.1.1.1.1.1 -rw-r--r-- 1 root adm14921041 Mar 23 06:25 mail.log.1.1.1.1.1.1.1 -rw-r--r-- 1 root adm 0 Mar 28 06:25 mail.log.1.1.1.1.1.1.1.1 After the weekend the logs seems a tree. Someone can help me to solve the problem? Thanks -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Postfix - Amavis erroneus SPAM
On Mon, 12 Mar 2018 14:09:23 + "Fazzina, Angelo" wrote: > Hi, I would expect you need to search your logs for all the entries > for this email > > CB9E3837E0F > > To see exactly what happened and go from there ? > Good Luck. > Mar 12 09:03:57 mailserver amavis[14797]: (14797-01) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [150.217.XXX.XX]:3685 [150.217.XXX.XXX] -> , quarantine: M/spam-M9145UbnjoSh.gz, Queue-ID: CB9E3837E0F, Message-ID: <5E7A686C7FD740989C918BF83AAEECF3@6204eng1>, mail_id: M9145UbnjoSh, Hits: 6.57, size: 639, 551 ms Mar 12 09:03:57 mailserver postfix/smtp[14715]: CB9E3837E0F: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.6, delays=0.05/0/0.01/0.55, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=14797-01 - spam) Mar 12 09:03:57 mailserver postfix/qmgr[1761]: CB9E3837E0F: removed The mail was discarded because identified as SPAM. > > -ANGELO FAZZINA > > ITS Service Manager: > Spam and Virus Prevention > Mass Mailing > G Suite/Gmail > > ang...@uconn.edu > University of Connecticut, ITS, SSG, Server Systems > 860-486-9075 > > -Original Message- > From: owner-postfix-us...@postfix.org > [mailto:owner-postfix-us...@postfix.org] On Behalf Of Enrico Morelli > Sent: Monday, March 12, 2018 9:15 AM To: postfix-users@postfix.org > Subject: Postfix - Amavis erroneus SPAM > > Deal, a software that control an hardware has to send alarm mail when > something happens. Starting from two weeks ago, the alarms stops to be > sent and checking in the mail server logs I see the following message: > > Mar 12 09:03:57 mailserver amavis[14797]: (14797-01) Blocked SPAM > {DiscardedOpenRelay,Quarantined}, [150.217.XXX.XXX]:3685 > [150.217.XXX.XXX] -> , > quarantine: M/spam-M9145UbnjoSh.gz, Queue-ID: CB9E3837E0F, > Message-ID: <5E7A686C7FD740989C918BF83AAEECF3@6204eng1>, mail_id: > M9145UbnjoSh, Hits: 6.57, size: 639, 551 ms > > > The alarms are blocked as SPAM. Is there a way to instruct > amavis/postfix that this mails aren't SPAM? > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Postfix - Amavis erroneus SPAM
Deal, a software that control an hardware has to send alarm mail when something happens. Starting from two weeks ago, the alarms stops to be sent and checking in the mail server logs I see the following message: Mar 12 09:03:57 mailserver amavis[14797]: (14797-01) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [150.217.XXX.XXX]:3685 [150.217.XXX.XXX] -> , quarantine: M/spam-M9145UbnjoSh.gz, Queue-ID: CB9E3837E0F, Message-ID: <5E7A686C7FD740989C918BF83AAEECF3@6204eng1>, mail_id: M9145UbnjoSh, Hits: 6.57, size: 639, 551 ms The alarms are blocked as SPAM. Is there a way to instruct amavis/postfix that this mails aren't SPAM? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Filter for incoming mail from External servers
On Wed, 29 Nov 2017 18:05:38 +0100 Matteo Cazzador wrote: > Hi, i need to apply a filter (a script) on every email incoming from > external to my mail server. > > I need to apply this filter on "from" field. > > Only for incoming mail from external server. > > Some one can help me please. > > Thanks > I'm not a Postfix expert, but how about header_checks? http://www.postfix.org/header_checks.5.html http://mattshaw.org/news/how-to-filter-mail-with-postfix-header_checks/ -- ----------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Helo rejected
On Fri, 10 Nov 2017 16:24:10 +0100 Matus UHLAR - fantomas wrote: > >On Fri, 10 Nov 2017 16:08:02 +0100 > >Matus UHLAR - fantomas wrote: > > > >> >> >On 10 November 2017 at 14:08, Enrico Morelli > >> >> > wrote: > >> >> >> my user don't receive mail from a real sender cause our mail > >> >> >> server reject the Helo command: > >> >> >> > >> >> >> NOQUEUE: reject: RCPT from > >> >> >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220]: 450 4.7.1 > >> >> >> : Helo command rejected: Host not > >> >> >> found; from= to= proto=ESMTP > >> >> >> helo= > >> >> >> Nov 8 17:55:46 genio postfix/smtpd[3667]: disconnect from > >> >> >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220] ehlo=1 > >> >> >> mail=1 rcpt=0/1 rset=1 quit=1 commands=4/5 > >> >> >> > >> >> >> Is there a way to receive these mails? > >> > >> >On Fri, 10 Nov 2017 15:42:16 +0100 > >> >Matus UHLAR - fantomas wrote: > >> >> you can whitelist particular IP by using "check_client_access" > >> >> and you most probably want to have such directive in main.cf. > >> > >> On 10.11.17 15:45, Enrico Morelli wrote: > >> >I have a check_sender_access, can I use that? > >> > >> depends on where you have the reject_unknown_helo_hostname. > > On 10.11.17 16:12, Enrico Morelli wrote: > >I've it under smtpd_helo_restrictions. > > this is evaluated after client and before restrictions - > you must whitelist it before. To better understand, have I to put check_client_access here? smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/etc/postfix/client_access, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname > > >> client access is evaluated before sender access, so if you have the > >> reject_unknown_helo_hostname in smtpd_client_restrictions, you must > >> either use check_client_access or move the > >> reject_unknown_helo_hostname (and possibly other checks) to > >> check_sender_access. > > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Helo rejected
On Fri, 10 Nov 2017 16:08:02 +0100 Matus UHLAR - fantomas wrote: > >> >On 10 November 2017 at 14:08, Enrico Morelli > >> > wrote: > >> >> my user don't receive mail from a real sender cause our mail > >> >> server reject the Helo command: > >> >> > >> >> NOQUEUE: reject: RCPT from > >> >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220]: 450 4.7.1 > >> >> : Helo command rejected: Host not > >> >> found; from= to= proto=ESMTP > >> >> helo= > >> >> Nov 8 17:55:46 genio postfix/smtpd[3667]: disconnect from > >> >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220] ehlo=1 mail=1 > >> >> rcpt=0/1 rset=1 quit=1 commands=4/5 > >> >> > >> >> Is there a way to receive these mails? > > >On Fri, 10 Nov 2017 15:42:16 +0100 > >Matus UHLAR - fantomas wrote: > >> you can whitelist particular IP by using "check_client_access" and > >> you most probably want to have such directive in main.cf. > > On 10.11.17 15:45, Enrico Morelli wrote: > >I have a check_sender_access, can I use that? > > depends on where you have the reject_unknown_helo_hostname. I've it under smtpd_helo_restrictions. > > client access is evaluated before sender access, so if you have the > reject_unknown_helo_hostname in smtpd_client_restrictions, you must > either use check_client_access or move the > reject_unknown_helo_hostname (and possibly other checks) to > check_sender_access. > -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Helo rejected
On Fri, 10 Nov 2017 15:42:16 +0100 Matus UHLAR - fantomas wrote: > >On 10 November 2017 at 14:08, Enrico Morelli > >wrote: > >> my user don't receive mail from a real sender cause our mail server > >> reject the Helo command: > >> > >> NOQUEUE: reject: RCPT from > >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220]: 450 4.7.1 > >> : Helo command rejected: Host not > >> found; from= to= proto=ESMTP > >> helo= > >> Nov 8 17:55:46 genio postfix/smtpd[3667]: disconnect from > >> rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220] ehlo=1 mail=1 > >> rcpt=0/1 rset=1 quit=1 commands=4/5 > >> > >> Is there a way to receive these mails? > > On 10.11.17 14:30, Dominic Raferd wrote: > >​You may be using this setting ​in one of your restriction lists: > >reject_unknown_helo_hostname. Remove this and you should be ok. I > >think there is not much point worrying about helo hostnames, they > >are easy to fake in any case. > > That's exactly why we block those fake helo hostnames. > > you can whitelist particular IP by using "check_client_access" and > you most probably want to have such directive in main.cf. > I have a check_sender_access, can I use that? > Enrico: > if possible, try contacting the sender that they are supposed to fix > their helo hostname (you won't be the only one who rejects mail from > them). If not, explain your customer that you have whitelisted the > sender's IP and that the problem is on their side. > THanks -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Helo rejected
Dear, my user don't receive mail from a real sender cause our mail server reject the Helo command: NOQUEUE: reject: RCPT from rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Nov 8 17:55:46 genio postfix/smtpd[3667]: disconnect from rrcs-70-60-37-220.central.biz.rr.com[70.60.37.220] ehlo=1 mail=1 rcpt=0/1 rset=1 quit=1 commands=4/5 Is there a way to receive these mails? Thanks -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Helo command rejected: Host not found
I'm trying to configure my outlook account to send email through my mail server, but I receive the following error: InvalidRecipientsException: Invalid recipients were provided for the message: 'more...@cerm.unifi.it' (450 4.7.1 : Helo command rejected: Host not found Is there a way to put *outlook.com in a "white list"? -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Re: Alias and mailing list
On Mon, 4 Sep 2017 10:53:48 +0200 Enrico Morelli wrote: > Dear, I installed a new mail server under a Debian 9 using postfix > 3.1.4 (like smtp) and dovecot (like lmtp) in a virtual user > environment. I coming from qmail, so when I want that all mails are > delivered to a local account and forwarded to another account, I've to > put in the user home directory a .qmail file with the following > content: > > ./.maildir > &remoteacco...@domain.org > > Also for internal mailing list I've to create a file with all mail > address and the mail are delivered to local users and if they have a > forward (in the .qmail file), the email are forwarded to remote user. > > I had read a lot of documentation to obtain the same thing, but seems > to be more complicated. The .forward doesn't work for me. > So I created a virtual_aliases with the local mailing list and a > recipient_bcc for the forward. But I've also to duplicate some remote > addresses, because if I write to a local mailing list the mail is only > delivered to the local users, the recipient_bcc is not read. Also I've > to put receive_override_options = no_address_mappings on main.cf > otherwise all forwarded email are duplicated. > > Is this the correct way? > > > No one can give me some hints? -- --- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
Alias and mailing list
Dear, I installed a new mail server under a Debian 9 using postfix 3.1.4 (like smtp) and dovecot (like lmtp) in a virtual user environment. I coming from qmail, so when I want that all mails are delivered to a local account and forwarded to another account, I've to put in the user home directory a .qmail file with the following content: ./.maildir &remoteacco...@domain.org Also for internal mailing list I've to create a file with all mail address and the mail are delivered to local users and if they have a forward (in the .qmail file), the email are forwarded to remote user. I had read a lot of documentation to obtain the same thing, but seems to be more complicated. The .forward doesn't work for me. So I created a virtual_aliases with the local mailing list and a recipient_bcc for the forward. But I've also to duplicate some remote addresses, because if I write to a local mailing list the mail is only delivered to the local users, the recipient_bcc is not read. Also I've to put receive_override_options = no_address_mappings on main.cf otherwise all forwarded email are duplicated. Is this the correct way? -- ------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY