Relay Domains Noob Question

Discussion in 'ISPConfig 3 Priority Support' started by Dave King, Dec 4, 2024.

Page 1 of 3
  1. Dave King

    Dave King Member HowtoForge Supporter

    Hi Guys

    I have an ISPConfig3 server as my frontend server, and I want to relay domains over to backend postfix servers. Each postfix server is responsible for its own domain.

    I have added a domain and marked the admin setting to have different relay options for different domains, and I have put in place the relay for it to go to.

    I am looking for someone to assist with this setup, happy to pay. All postfix servers are built, all spf, dkim and dmarc is done. I am just running into config issues such as relay denied and SSL_accept error.

    Thanks

    Dave
     
    Dave King, Dec 4, 2024
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Hello Dave, so you added the domain as relay domain in ISPConfig, and you also added relay users in ISPConfig, right? But you did not add it as email domain? Because domains that shall be relayed may not be added as an email domain.

    If the above is ok so far, which exact error do you get in the mail.log of the ISPConfig server, and which errors do you get in the mail.log files of the target servers?

    If you need help by remote login, please contact Thom Pol from Amsterdamtech here: https://www.ispconfig.org/get-support/?type=ispconfig. He can review your setup and make the necessary settings for you.
     
    till, Dec 4, 2024
    #2
  3. Dave King

    Dave King Member HowtoForge Supporter

    Hi Till
    So I only just discovered ISPConfig, seems great! But what I did have was a front end postfix server, which relayed to backend postfix servers. I built a new frontend srver with ISPConfig and am trying to relay to the existing backend postfix servers.

    Question, can I install ISPConfig as backend servers and relay to those for easier management from the ISPConfig frontend server?

    Have to get a quote, would like to have a go at it first though!

    Thanks

    Dave
     
    Dave King, Dec 4, 2024
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Okay, in this case, do not add an email domain in ISPCofig. Just add the relay domain, email routing, and relay relay recipients.

    The configuration would is basically the same. But yes, you can reinstall the backend systems to manage all of them from within one ISPConfig master server, but there is no need to do that as you can use your current ISPConfig system as a frontend server for any kind of mail server, e.g. many users use it as relay system in front of their Exchange servers to protect exchange from the internet.
     
    till, Dec 4, 2024
    #4
  5. Dave King

    Dave King Member HowtoForge Supporter

    Thanks, the issue is, we do need some users to have IMAP and POP3 mailboxes. But I guess I could just have another server to do that, right?

    EDIT: Also if I have no domain added, how do I authenticate via SMTP to relay the email? If there are no users :/
     
    Last edited: Dec 4, 2024
    Dave King, Dec 4, 2024
    #5
  6. Dave King

    Dave King Member HowtoForge Supporter

    Update:
    1. Built a 2nd ISPConfig server.
    2. Removed the domain to be forwarded from frontend server.
    3. Added @domaintoforward.com into Relay Recipients.
    4. Added @domaintobeforwarded.com into Relay Domains.
    5. Added @domaintobeforwarded.com into Email Routing with the destination server.
    6. Added the domain into the backend server.
    I sent an email to my gmail then checked the mail logs, and it is trying to send the email direct to gmail and not relaying to the relay server.
    Note, I do not want to deliver the email to the backend server, I am looking for frontend server to pass it to backend server which then delivers it out to the recipient.
    Any help greatly appreciated.
    Thanks
    Dave
     
    Dave King, Dec 4, 2024
    #6
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    An email domain is either local (then you have an email domain and mailboxes) or it is a remote domain (the email is relayed to another server). You can not have both at the same time.
     
    till, Dec 5, 2024
    #7
  8. Dave King

    Dave King Member HowtoForge Supporter

    Yes I follow that. It was deleted from the frontend server but still sending out to the internet in the log files, straight to Google.
     
    Dave King, Dec 5, 2024
    #8
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    If you want to send emails from a specific server, you must set that outgoing relay server under System > server config > email. On the server that shall act as outgoing relay for the other systems, you can add the IP addresses of the other systems in the mynetworks setting in postfix main.cf file, if they have a fixed IP. This allows the other nodes to relay through the central outgoing server without requiring to be authenticated.
     
    till, Dec 5, 2024
    #9
  10. Dave King

    Dave King Member HowtoForge Supporter

    Do you mean in the relayhost field?
    Today I setup multiserver, so I have god (frontend server) and krypton (backend server). Both have email enabled.
    I added god to the relayhost field in system > server config > mail for krypton.
    On God in Advanced Email Routing I added server god, domain = domaintofwd.com, transport SMTP and in Relay Recipients @domaintofwd.com

    But when I send an email the log shows God trying to connect directly to gmail mail servers still and not showing in the queue for krypton as expected.
    Help please :)
     
    Dave King, Dec 5, 2024
    #10
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    I mean: System > server config > email > Relayhost. You can verify that setting by looking into the Postfix main.cf file, there is a line relayhost where this gets added to. But this for emails sent from crypton to god and not the other way.
     
    till, Dec 5, 2024
    #11
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    So emails that arrive from the internet for domain (you must have set an MX DNS record for domain pointing to server god) will be relayed to @domaintofwd.com.

    You said you sent an email to gmail, this must indeed sent directly by god as you configured it as your central outgoing relay server.
     
    till, Dec 5, 2024
    #12
  13. Dave King

    Dave King Member HowtoForge Supporter

    I am sending emails from a CRM that is connected to God. The MX is not set but it correctly sends to God from the CRM but its SMTP config, so not issue there.
    What I am trying to do is because the CRM only allows 1 SMTP connection, but we have many domains, I want all emails from the CRM to go to God, then God forward them to the other ISPConfig servers to be delivered to the internet.
    I did have this working with multiple postfix servers, but preferred the GUI so my team can manage it easier.
    Any advice how to achieve it, greatly appreciated.
     
    Dave King, Dec 5, 2024
    #13
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    Okay, it's a bit unusual setup for an ISPConfig system. So, you have one mail client, which is your CRM. This email client is connected to your master server (god) to send emails with smtp. Then, you want to relay these outgoing emails to other nodes and these nodes then shall send them to the internet? What is the criteria under which the outgoing nodes are chosen by postfix, is this by sender domain?
     
    till, Dec 5, 2024
    #14
  15. Dave King

    Dave King Member HowtoForge Supporter

    What it is, we need each domain to have its own dedicated IP.

    All email goes to God, lets say domain1.com, domain2.com, domain3.com - high disk, high CPU etc.
    Then there are 3 slave servers.
    I need domain1.com to go to slave1 then out to the internet, domain2.com to go to slave2.com then out to the internet etc.
    In postfix I had all email go to God, which then forwarded it as above and delivered it.
    EDIT: I imagined that relaying a domain to one of the ISPConfig slave servers, which then had the domain configured in it as a receiver, would then accept it and deliver it.
     
    Last edited: Dec 5, 2024
    Dave King, Dec 5, 2024
    #15
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, then, I misunderstood you in the beginning. I thought you wanted to route incoming emails.

    You can try this:

    1) Remove the relay settings you set in ISPConfig, also remove the email routing., relay domains and relay recipients.
    2) Go to System > interface > main config > Mail and enable the checkbox "Show per domain relay options". Now add your 3 domains as email domains in ISPConfig. In the email domain settings you have now input fields where you can configure the relay server for that domain. Outgoing emails where the sender domain is that domain will then be sent trough that relay host.

    2024-12-05 18_42_53-ISPConfig.png
     
    till, Dec 5, 2024
    #16
  17. Dave King

    Dave King Member HowtoForge Supporter

    Just actioned that, same issue, and with an error. God is added to mynetworks so guess SMTP auth not req, but even so, I think it would be a different error, it is just not routing.

    D747D7E016 1377 Thu Dec 5 16:49:13 [email protected]
    (connect to alt2.gmail-smtp-in.l.google.com[2607:f8b0:400e:c00::1b]:25: Network is unreachable)
    [email protected]

    upload_2024-12-5_17-57-3.png
     
    Dave King, Dec 5, 2024
    #17
  18. till

    till Super Moderator Staff Member ISPConfig Developer

    Ok, so it still tried to send directly and not using the relay host? Maybe you can check the created relay config to see if its similar to what you used before. Also I'm not 100% sure if postfix might expect that the sender is authenticated, you could try to add a mailbox in ISPConfig and use that mailbox address and password in your CRM as smtp credentials.
     
    till, Dec 5, 2024
    #18
  19. Dave King

    Dave King Member HowtoForge Supporter

    I think my issue is it is not taking that route with ACCESS DENIED.
    What is ISPConfig would define the route please?
     
    Dave King, Dec 5, 2024
    #19
  20. till

    till Super Moderator Staff Member ISPConfig Developer

    You define the outgoing server by setting the relayhost in the domain. Postfix will then try to deliver emails for this sender domain trogh the system that you defined as relay. If you then get access denied, it is likely your relay server is not allowing the god server to relay through it. Have you added the IP address of the god server in the mynetworks line of the slave server and restarted postfix on the slave?
     
    till, Dec 5, 2024
    #20
Page 1 of 3

Share This Page