Emails to Catchall Domain Filtered

Discussion in 'Server Operation' started by bpmee, Apr 29, 2024.

  1. bpmee

    bpmee Member

    Emails to catchall domain (eg. *random*@mydomain.com) are being filtered. Note, the server receives emails to mailboxes normally (eg. [email protected]).

    1. mydomain.com is set as a catchall domain sending to [email protected]
    2. Adjusting spam filter from "wants all spam" to "uncensored" didn't work.
    3. Server sends and receives all other emails normally.
    I think it has to do with a lmtp setting, but I'm stumped! :(

    /var/log/maillog
    Code:
    ]# cat /var/log/maillog | grep [email protected]
    
    Apr 29 09:53:13 myhost postfix/smtpd[60838]: NOQUEUE: filter: RCPT from mail-yw1-f176.google.com[209.85.128.176]: <[email protected]>: Sender address triggers FILTER lmtp:[127.0.0.1]:10026; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail-yw1-f176.google.com>
    Apr 29 09:53:13 myhost postfix/smtpd[60838]: NOQUEUE: filter: RCPT from mail-yw1-f176.google.com[209.85.128.176]: <[email protected]>: Sender address triggers FILTER lmtp:[127.0.0.1]:10024; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail-yw1-f176.google.com>
    Apr 29 09:53:13 myhost postfix/smtp[60841]: D83E11A0FED: to=<admin@mydomain>, orig_to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10025, delay=0.07, delays=0.01/0.02/0.03/0.01, dsn=2.1.5, status=deliverable (250 2.1.5 Ok)
    Apr 29 09:53:17 myhost postfix/smtpd[60838]: NOQUEUE: reject: RCPT from mail-yw1-f176.google.com[209.85.128.176]: 451 4.3.5 Server configuration problem; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail-yw1-f176.google.com>
    postconf
    Code:
    postconf | grep lmtp
    lmtp_address_preference = any
    lmtp_assume_final = no
    lmtp_bind_address =
    lmtp_bind_address6 =
    lmtp_body_checks =
    lmtp_cname_overrides_servername = no
    lmtp_connect_timeout = 0s
    lmtp_connection_cache_destinations =
    lmtp_connection_cache_on_demand = yes
    lmtp_connection_cache_time_limit = 2s
    lmtp_connection_reuse_time_limit = 300s
    lmtp_data_done_timeout = 600s
    lmtp_data_init_timeout = 120s
    lmtp_data_xfer_timeout = 180s
    lmtp_defer_if_no_mx_address_found = no
    lmtp_delivery_slot_cost = $default_delivery_slot_cost
    lmtp_delivery_slot_discount = $default_delivery_slot_discount
    lmtp_delivery_slot_loan = $default_delivery_slot_loan
    lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
    lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
    lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
    lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
    lmtp_destination_rate_delay = $default_destination_rate_delay
    lmtp_destination_recipient_limit = $default_destination_recipient_limit
    lmtp_discard_lhlo_keyword_address_maps =
    lmtp_discard_lhlo_keywords =
    lmtp_dns_resolver_options =
    lmtp_enforce_tls = no
    lmtp_extra_recipient_limit = $default_extra_recipient_limit
    lmtp_generic_maps =
    lmtp_header_checks =
    lmtp_host_lookup = dns
    lmtp_initial_destination_concurrency = $initial_destination_concurrency
    lmtp_lhlo_name = $myhostname
    lmtp_lhlo_timeout = 300s
    lmtp_line_length_limit = 998
    lmtp_mail_timeout = 300s
    lmtp_mime_header_checks =
    lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
    lmtp_mx_address_limit = 5
    lmtp_mx_session_limit = 2
    lmtp_nested_header_checks =
    lmtp_per_record_deadline = no
    lmtp_pix_workaround_delay_time = 10s
    lmtp_pix_workaround_maps =
    lmtp_pix_workaround_threshold_time = 500s
    lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
    lmtp_quit_timeout = 300s
    lmtp_quote_rfc821_envelope = yes
    lmtp_randomize_addresses = yes
    lmtp_rcpt_timeout = 300s
    lmtp_recipient_limit = $default_recipient_limit
    lmtp_recipient_refill_delay = $default_recipient_refill_delay
    lmtp_recipient_refill_limit = $default_recipient_refill_limit
    lmtp_reply_filter =
    lmtp_rset_timeout = 20s
    lmtp_sasl_auth_cache_name =
    lmtp_sasl_auth_cache_time = 90d
    lmtp_sasl_auth_enable = no
    lmtp_sasl_auth_soft_bounce = yes
    lmtp_sasl_mechanism_filter =
    lmtp_sasl_password_maps =
    lmtp_sasl_path =
    lmtp_sasl_security_options = noplaintext, noanonymous
    lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
    lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
    lmtp_sasl_type = cyrus
    lmtp_send_dummy_mail_auth = no
    lmtp_send_xforward_command = no
    lmtp_sender_dependent_authentication = no
    lmtp_skip_5xx_greeting = yes
    lmtp_skip_quit_response = no
    lmtp_starttls_timeout = 300s
    lmtp_tcp_port = 24
    lmtp_tls_CAfile =
    lmtp_tls_CApath =
    lmtp_tls_block_early_mail_reply = no
    lmtp_tls_cert_file =
    lmtp_tls_ciphers = export
    lmtp_tls_dcert_file =
    lmtp_tls_dkey_file = $lmtp_tls_dcert_file
    lmtp_tls_eccert_file =
    lmtp_tls_eckey_file = $lmtp_tls_eccert_file
    lmtp_tls_enforce_peername = yes
    lmtp_tls_exclude_ciphers =
    lmtp_tls_fingerprint_cert_match =
    lmtp_tls_fingerprint_digest = md5
    lmtp_tls_key_file = $lmtp_tls_cert_file
    lmtp_tls_loglevel = 0
    lmtp_tls_mandatory_ciphers = medium
    lmtp_tls_mandatory_exclude_ciphers =
    lmtp_tls_mandatory_protocols = !SSLv2
    lmtp_tls_note_starttls_offer = no
    lmtp_tls_per_site =
    lmtp_tls_policy_maps =
    lmtp_tls_protocols = !SSLv2
    lmtp_tls_scert_verifydepth = 9
    lmtp_tls_secure_cert_match = nexthop
    lmtp_tls_security_level =
    lmtp_tls_session_cache_database =
    lmtp_tls_session_cache_timeout = 3600s
    lmtp_tls_verify_cert_match = hostname
    lmtp_use_tls = no
    lmtp_xforward_timeout = 300s
    
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    What is the spamfilter set for the domain?
     
  3. bpmee

    bpmee Member

    Hi Th0m, I've set the spam filter to "uncensored" but it makes no difference.
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Instead of setting it to uncensored, just disable it completely.

    And are you using amavis or rspamd? If it's rspamd, you might have to tweak the default spamscores.
     
    ahrasis likes this.
  5. bpmee

    bpmee Member

    Hi Th0m, I'm using Amavis. When I turned off "enable greylisting" for each catchall domain, delivery worked!

    So it appears something is happening with catchall domains and greylisting. Again, emails to a preset address deliver as normal.

    Note that I'm on CentOS 7.9 and I installed postgrey. Perhaps there's a postgrey misconfiguration?
     
    Th0m likes this.

Share This Page