Postfix relay problem - no system email

Discussion in 'Server Operation' started by dpicella, Nov 1, 2009.

  1. dpicella

    dpicella New Member

    This is a bit of a nightmare, but here is the problem.

    1. My emails where not being delivered to "hotmail" ... my hosting provider said that my block of IPs on my dedicated server were close to those of another customer that was banned because of spamming. Therefore I was issued a new block of IPs.

    2. When the problem was discovered, support from hosting provider modified my postfix config (/etc/postfix/main.cf) to a relay host. Since then, I have not been able to send/receive system mail to any accounts in /var/spool/mail. Root's mailbox is empty.

    3. I migrated the server to the new block of IPs, but that did not fix the problem.

    4. I restored the old postfix config file (prior to all this - namely the relay host chaneg) and that does let postfix send and receive system mail, but sending outside of my server comes back due to relay errors - the bounces wind up in root's mailbox.

    5. My hosting provider did something last night and I am again able to send and receive outside of the system, but now I again can't send and receive system messages.

    Something is screwed up ... I don't know where. I suspect my hosting provider is not relaying correctly or there is a problem locally with postfix. Of note, I am also using courier-imap and squirrel mail. Right now, squirrelmail is working, but again ... as long as there are no bounces or system mails to deliver.

    Help!
     
  2. Edek7

    Edek7 New Member

    I had something similar to your situation but i finally was able to get rid blocked ISP host from my e-mail route. I bought a co-location service and set up a proxy host on Debian lenny with ASSP and proxy postfix for non-local email delivery.
    Everything is working fine except that i still need to set-up cname and revDNS for my proxy email gateway.

    The strangest thing ever i noticed the host is unable to send email to scglobal.net.

    The error is :
    Nov 1 13:49:58 proxy postfix/error[17158]: 0AD31105C74A: to=<[email protected]>, relay=none, delay=183349, delays=183349/0.01/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)

    No idea how to resolve this problem. Everywhere else emails are send with OK status. Didn`t check the gmail.com or yahoo.com but im my interest now is the sbcglobal.net because ppl that use my server want to send the emails there . Nothing seems to resolve it... I tried to set up transport manually but without any sucess.

    Somebody know how to resolve my problem ?
     
  3. dpicella

    dpicella New Member

    Server email problems related to postfix

    I seem to have fixed the problem. Looks like it may have been my fault. When I migrated my server to the new block of IPs. I forgot to update the ip adress in the /etc/hosts file!

    It seems to be working.
     
  4. dpicella

    dpicella New Member

    There is a way to setup mail transport ... you are right ... not sure. Maybe somebody can help you out here.
     
  5. Edek7

    Edek7 New Member

    Thank you on your reply. I`m not sure but it seems that sbcglobal, gmail and att has blocked all communication on port 25, they have a 587 and 465 open and i can make a transport to them on this ports but it needs an authentication by username and password. Does that mean i need to have account there to send anything from my corporate e-mail server to them? If that`s true ... i`m not happy by that. Maybe there is a smarthost that can be used for sending email to them ?
     
  6. olddocks

    olddocks New Member

    did you setup reverse IP to your mail server? if you want to deliver emails to hotmail, yahoo etc, this needs to be done. Just ask your hosting provider to setup reverse ip.
     
  7. Edek7

    Edek7 New Member

    Yes, the revDNS is set correctly. Today I also chnaged DNS and added A and additional MX record.
     
  8. Edek7

    Edek7 New Member

    Hello, this is very ill situation. The e-mails are send to gmail.com correctly:

    Nov 4 16:31:08 proxy postfix/smtp[2937]: 09F40105C744: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[209.85.219.13]:25, delay=9.1, delays=7.2/0.01/0.15/1.7, dsn=2.0.0, status=sent (250 2.0.0 OK 1257352268 17si2870509ewy.82)

    but sbcglobal.net and this [email protected] have mail transport unavailable.

    Nov 4 16:03:00 proxy postfix/error[12202]: E44C1105C756: to=<[email protected]>, relay=none, delay=101253, delays=101253/0.01/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)

    and this :

    Nov 3 09:54:02 proxy postfix/smtp[14369]: A1121105C756: to=<[email protected]>, relay=mail2.ats.pl[81.15.165.5]:25, delay=0.3, delays=0.04/0/0.22/0.04, dsn=5.7.1, status=bounced (host mail2.ats.pl[81.15.165.5] said: 554 5.7.1 <proxy.miechow.net.pl[193.239.47.26]>: Client host rejected: My email server does not accept emails sent from proxy servers as stated in your revDNS: proxy.miechow.net.pl (in reply to RCPT TO command))

    What is going on ??
    My DNS entries :

    dig mx miechow.net.pl

    ; <<>> DiG 9.5.1-P3 <<>> mx miechow.net.pl
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50962
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 3

    ;; QUESTION SECTION:
    ;miechow.net.pl. IN MX

    ;; ANSWER SECTION:
    miechow.net.pl. 85434 IN MX 0 solar.miechow.net.pl.
    miechow.net.pl. 85434 IN MX 5 proxy.miechow.net.pl.

    ;; AUTHORITY SECTION:
    miechow.net.pl. 85422 IN NS fns2.sgh.waw.pl.
    miechow.net.pl. 85422 IN NS fns1.sgh.waw.pl.

    ;; ADDITIONAL SECTION:
    proxy.miechow.net.pl. 85422 IN A 193.239.47.26

    and revDNS :

    26.47.239.193.in-addr.arpa domain name pointer proxy.miechow.net.pl.

    Any idea what`s going on ?
     
  9. falko

    falko Super Moderator Howtoforge Staff

    Seems as if the remote mail server simply doesn't like the string "proxy" in your PTR record.
     
  10. Edek7

    Edek7 New Member

    It seems you`re right Falko. Anyway I don`t care about that unless somebody will be unhappy with this small problem that this host doesn`t like proxy in PTR. The worst is the mail transport unavailable problem ... i really don`t know what is wrong with this setup ... 90% of email hosts are accepting e-mails from my host without any troubles. Only a few hosts are making troubles like no transport or don`t like proxy ... anyway i just want to know how to get rid the error with "no transport ... ".
     
  11. falko

    falko Super Moderator Howtoforge Staff

  12. Edek7

    Edek7 New Member

    Checking 193.239.47.26 against 101 known blacklists...
    Listed 0 times with 3 timeouts.
    Blacklist Status Reason TTL ResponseTime
    AHBL OK 31
    ANT OK 172
    Backscatter.org OK 31
    BARRACUDA OK 31
    BURNT-TECH OK 31
    CASA-CBL OK 203
    CASA-CBL+ OK 203
    CASA-CDL OK 203
    CBL OK 187
    CLUECENTRAL OK 187
    CYBERLOGIC OK 203
    DEADBEEF OK 203
    DNSBLINFO OK 203
    DUINV OK 203
    DULRU OK 328
    EMAILBASURA OK 3869
    FABELSOURCES OK 203
    FIVETEN OK 250
    GIRL OK 250
    GRIP OK 250
    HIL OK 250
    HIL OK 250
    HILLI OK 328
    ICMFORBIDDEN OK 343
    IMP-SPAM OK 328
    IMP-WORM OK 3806
    INTERSIL OK 343
    ivmSIP OK 343
    ivmSIP/24 OK 343
    KEMPTBL OK 343
    KUNDENSERVER OK 343
    LASHBACK OK 343
    LNSGBLOCK OK 343
    LNSGBULK OK 343
    LNSGDUL OK 343
    LNSGMULTI OK 343
    LNSGOR OK 343
    LNSGSRC OK 343
    MSRBL-Combined OK 343
    MSRBL-Images OK 343
    MSRBL-Phising OK 343
    MSRBL-Spam OK 343
    MSRBL-Viruses OK 343
    NERD OK 343
    NETHERRELAYS OK 343
    NETHERUNSURE OK 343
    NIXSPAM OK 343
    NJABL OK 343
    NJABLDUL OK 343
    NJABLFORMMAIL OK 343
    NJABLMULTI OK 343
    NJABLPROXIES OK 343
    NJABLSOURCES OK 343
    NLKUNBLACKLIST OK 343
    NLKUNWHITELIST OK 343
    NOFALSEPOSITIVE OK 343
    NOMOREFUNN OK 3822
    ORID OK 3916
    ORVEDB OK 1513
    OSPAM OK 1513
    PDL OK 1513
    PSBL OK 1513
    RANGERSBL OK 3838
    RATS-Dyna OK 2028
    RATS-NoPtr OK 2028
    RATS-Spam OK 2028
    REDHAWK OK 2028
    RRBL OK 3838
    RSBL OK 3058
    SCHULTE OK 3058
    SDERB OK 3058
    SENDERBASE OK 3058
    SERVICESNET OK 3058
    SORBS-BLOCK OK 3572
    SORBS-DUHL OK 3572
    SORBS-HTTP OK 3572
    SORBS-MISC OK 3572
    SORBS-SMTP OK 3572
    SORBS-SOCKS OK 3572
    SORBS-SPAM OK 3572
    SORBS-WEB OK 3572
    SORBS-ZOMBIE OK 3572
    SPAMCANNIBAL OK 3572
    SPAMCOP OK 3572
    Spamhaus-ZEN OK 3572
    SPAMSOURCES OK 3666
    SPEWS1 OK 3666
    SPEWS2 OK 3666
    SWINOG OK 3666
    TECHNOVISION OK 3666
    TRIUMF OK 3666
    UCEPROTECTL1 OK 3666
    UCEPROTECTL2 OK 3666
    UCEPROTECTL3 OK 3666
    VIRBL OK 3666
    WPBL OK 3666
    WSFF OK 3666
    ZONEEDIT OK 3666
    CSMA TIMEOUT ERROR, Reponse code=2 0
    SOLID TIMEOUT ERROR, Reponse code=2 0
    SPAMRBL TIMEOUT ERROR, Reponse code=2 0
     
  13. falko

    falko Super Moderator Howtoforge Staff

    Did you set up SPF records for your email domains?
     
  14. Edek7

    Edek7 New Member

    No, i did not set up it. I can cause this problem ?
     
  15. sjau

    sjau Local Meanie Moderator

    just being curious:

    wouldn't it be a lot simpler to relay all outoing email through your ISP?
     
  16. Edek7

    Edek7 New Member

    Sure it would be so simple if only my ISP take their hosts from spamlists. The quick story is :

    At June 2009 the ISP mail gateway was blocked beacause of massive spam send by some spam robots on their own computers just because they didn`t take care about their antivirus defence. I did a lot of calls to them and told them about that their hosts are on spamlists and asked them to do something with that. They just did nothing. My ISP left me on my own. So i decided to do something to be able to send e-mails from my servers because my clients was angry on ME not on the ISP company that left me alone with the problem. The worst is they are monopolyst and i cannot definitivly cut my company from this ISP. So my idea was to take another server that is far away from my ISP network and set the proxy email gateway to get rid of problem with ISP hosts that are on spamlists. My idea works as you see but with some troubles and I want to make it to work better than now.
    And that`s the situation I am now.
     
  17. falko

    falko Super Moderator Howtoforge Staff

    Yes, other mailservers might refuse to accept mails from you if there is no SPF record for your domain.
     
  18. rojertwose

    rojertwose New Member

    Hey Dpicella
    I am rojertwose I read your problem it not hard just you have to follow the technically step and there are also possible due to traffic and virus problem.
     
  19. sjau

    sjau Local Meanie Moderator

    Or relay all your outgoing email through your ISPs mailserver...
     

Share This Page