I cant receive emails from some servers -> 530 5.7.0 Must issue a STARTTLS command first

Discussion in 'Server Operation' started by davincy, Sep 21, 2016.

  1. davincy

    davincy New Member

    Hi, I'm a bit frustrated with this issue.
    I got a linux server with a postfix error. I can send emails to all the addresses, but I can not receive emails from some people/servers with the next error:

    <-- 220 xxxxxxxxxxxx ESMTP Postfix
    --> EHLO xxxxxxxx
    <-- 250-xxxx-xxxxxxxxx
    <-- 250-PIPELINING
    <-- 250-SIZE 10240000
    <-- 250-VRFY
    <-- 250-ETRN
    <-- 250-STARTTLS
    <-- 250-ENHANCEDSTATUSCODES
    <-- 250-8BITMIME
    <-- 250 DSN
    --> MAIL From:<xxxxxxxxxxxxxxxxxx> SIZE=23929
    <-- 530 5.7.0 Must issue a STARTTLS command first
    --> QUIT

    For gmail, hotmail and other public servers all its ok.
    Some one can help me?
    Regards
     

    Attached Files:

  2. davincy

    davincy New Member

    My main.cf
    queue_directory = /var/spool/postfix
    command_directory = /usr/sbin
    daemon_directory = /usr/libexec/postfix
    data_directory = /var/lib/postfix
    mail_owner = postfix
    myhostname = myhostname
    mydomain = mydomain
    myorigin = $mydomain
    inet_interfaces = all
    inet_protocols = all
    mydestination = $myhostname, localhost.$mydomain, localhost
    unknown_local_recipient_reject_code = 550
    mynetworks = 127.0.0.0/8
    alias_maps = hash:/etc/aliases
    alias_database = hash:/etc/aliases
    home_mailbox = Maildir/
    debug_peer_level = 2
    debugger_command =
    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
    ddd $daemon_directory/$process_name $process_id & sleep 5
    sendmail_path = /usr/sbin/sendmail.postfix
    newaliases_path = /usr/bin/newaliases.postfix
    mailq_path = /usr/bin/mailq.postfix
    setgid_group = postdrop
    html_directory = no
    manpage_directory = /usr/share/man
    sample_directory = /usr/share/doc/postfix-2.10.1/samples
    readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
    virtual_mailbox_domains = /etc/postfix/virtual_domains
    virtual_mailbox_base = /var/mail/vhosts
    virtual_mailbox_maps = hash:/etc/postfix/vmailbox
    virtual_minimum_uid = 5001
    virtual_uid_maps = static:5001
    virtual_gid_maps = static:5001
    virtual_alias_maps = hash:/etc/postfix/virtual

    # SSL/TLS
    smtpd_use_tls=yes
    smtpd_tls_security_level = may
    smtpd_tls_auth_only = no
    smtpd_tls_key_file = /etc/postfix/ssl/postfix.key
    smtpd_tls_cert_file = /etc/postfix/ssl/postfix.crt
    smtpd_tls_loglevel = 0
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_timeout = 3600s
    smtpd_enforce_tls = no
    tls_random_source = dev:/dev/urandom
    smtp_host_lookup = native

    # SASL
    smtpd_sasl_type = dovecot
    broken_sasl_auth_clients = yes
    smtpd_sasl_path = private/auth
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_security_options = noanonymous
    smtp_sasl_security_options = noanonymous

    # HELO restrictions:
    smtpd_delay_reject = yes
    smtpd_helo_required = yes
    smtpd_helo_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_helo_hostname,
    reject_invalid_helo_hostname,
    permit

    # Sender restrictions:
    smtpd_sender_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    permit

    # Recipient restrictions:
    smtpd_recipient_restrictions =
    reject_unauth_pipelining,
    reject_non_fqdn_recipient,
    reject_unknown_recipient_domain,
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
    permit

    # Relay restrictions
    smtpd_relay_restrictions =
    permit_mynetworks
    permit_sasl_authenticated
    reject_unauth_destination
    permit

    # Limit DOS
    default_process_limit = 100
    smtpd_client_connection_count_limit = 10
    smtpd_client_connection_rate_limit = 30
    queue_minfree = 20971520
    header_size_limit = 51200
    message_size_limit = 10240000
    smtpd_recipient_limit = 100
     
  3. davincy

    davincy New Member

    Thank you!
    The mistake was at master.cf
     
  4. Great!
    Mark thread as solved :)
     

Share This Page